make HTTP sampler to check certificate on SSL/TLS connections
Open
enhancement
os: All
P2
- Dominant language
- Java
- Stars
- 9.5k
- Forks
- 2.3k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 5
Description
**ateles.belzebuth.hybridus+apache** ([Bug 57717](https://bz.apache.org/bugzilla//show_bug.cgi?id=57717&redirect=false)):
The HTTP Sampler does not check the server certificate during the TLS handshake. This behavior opens the connection to man-in-the-middle attacks. While this behavior is acceptable for test scenarios where security is not a concern, it can become a serious problem in a productive environment; e.g. if JMeter is used for performance monitoring of a web application.
Can you add a switch (checkbox or jmeter property) that allows enabling certificate checks?
Best regards, @
OS: All
Contributor guide
Assessment
This issue has not been assessed yet.