- Created by SS Doc Editor, last modified on Dec 01, 2022
To record HTTPS traffic, you need to trust the StresStimulus root certificate. That should be done only once per machine. There are several ways this can be done.
During Installation
During installation, the installer will prompt to trust the StresStimulus root certificate. Tick the Install StresStimulus certificate for standalone version checkbox and click Next.
A Windows confirmation dialog will appear next, where you can confirm that you trust the root certificate upon which it will be added to trusted Certificate Authorities.
Machine installation
Starting in v5.7, during installation, the StresStimulus certificate will be installed in the local machine certificate store and not in the installing user's machine store.
Suppose you are also installing the StresStimulus Fiddler addon. In that case, you can also install the Fiddler Certificate root by ticking the Install Fiddler certificate for add-on version checkbox. You will get another Windows confirmation dialog to confirm trusting the certificate.
In the Application
If you choose not to trust the StresStimulus root certificate, you can trust it inside the StresStimulus application.
In the StresStimulus menu go to Options > HTTPS... In the dialog, tick the Enable testing over HTTPS checkbox. The same Windows confirmation dialog will appear as above. Click Yes to trust the StresStimulus certificate.
Manually Enabling HTTPS
Sometimes the above two methods may not work for various reasons, including security settings. If this is the case, your HTTPS traffic will not be captured. To fix this issue, the certificate trust should be enabled manually.
First, you need to export the StresStimulus root certificate. In the StresStimulus main menu, go to Options > HTTPS... to open the HTTPS options dialog.
Click the Export Root Certificate button and, in the save file dialog, provide the certificate save location.
Open Internet Explorer and in the main menu, go to Tools > Internet Options.
In the Internet Options dialog, select the Content Tab and click the Certificates button.
In the certificates dialog, select the Trusted Root Certification Authorities tab and click the Import... button.
Follow the certificate wizard. In the second step, specify the file path of the previously exported certificate. Click next until the wizard completes the import.
If you are using Firefox browser for recording, then click here to see how to enable HTTPS in Firefox.
Client certificates
StresStimulus supports recording applications that require a specific client certificate.
The client certificate must be in the form of a .cer file and copied to the following destination: % USERPROFILE % \My Documents \Fiddler2\ClientCertificate.cer
Obtaining the .cer file from the installed certificate
The .cer file can be obtained by exporting the client certificate from the personal certificate store.
To open the current user store, navigate to Start > Run (Start + R) > type certmgr.msc
Right-click on the client certificate > All Tasks > Export... to bring up the export wizard
Obtaining the .cer file from another certificate file
If the certificate is not currently in your certificate store, but you currently have a file (like .p12 or .pfx), then first install the certificate into the personal certificate store
To open the current user store, navigate to Start > Run (Start + R) > type certmgr.msc
Right-click on Personal folder > All Tasks > Import... to bring up the import wizard
Once imported, use the technique described above to export it into .cer format.
Machine installation
Starting in v5.7, the StresStimulus certificate can be installed in the local machine store as well. This is beneficial for an administrator to install it once for every machine user.
Client Certificate Authentication
For more on recording with client certificates, see this Fiddler article.
- No labels