Getting Security exception after opening jMeter Plugin manager

1,025 views

Skip to first unread message

Sree Ranganath K

unread,

Oct 3, 2021, 12:30:08 PM10/3/21

to jmeter-plugins

I am using the latest version of jMeter (5.4.1). Once I open the plugin manager.

Below exception is occurring.

2021-10-03 21:44:20,466 INFO o.j.r.JARSourceHTTP: Requesting https://jmeter-plugins.org/repo/?installID=windows_10-69b30b75a0279b8ce40cc7b99e39c1eb-gui

2021-10-03 21:44:25,581 WARN o.j.r.PluginManagerMenuItem: Failed to load plugin updates info

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.ssl.Alert.createSSLException(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.TransportContext.fatal(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.SSLHandshake.consume(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.HandshakeContext.dispatch(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.TransportContext.dispatch(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.SSLTransport.decode(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.SSLSocketImpl.decode(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(Unknown Source) ~[?:1.8.0_291]

at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) ~[?:1.8.0_291]

at org.apache.http.conn.ssl.SSLSocketFactory.createLayeredSocket(SSLSocketFactory.java:570) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:554) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:415) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:180) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:326) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:605) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:440) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:835) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83) ~[httpclient-4.5.12.jar:4.5.12]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56) ~[httpclient-4.5.12.jar:4.5.12]

at org.jmeterplugins.repository.JARSourceHTTP.execute(JARSourceHTTP.java:499) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.JARSourceHTTP.execute(JARSourceHTTP.java:494) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.JARSourceHTTP.getJSON(JARSourceHTTP.java:152) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.JARSourceHTTP.getRepositories(JARSourceHTTP.java:276) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.JARSourceHTTP.getRepo(JARSourceHTTP.java:304) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.PluginManager.load(PluginManager.java:71) ~[jmeter-plugins-manager-1.6.jar:?]

at org.jmeterplugins.repository.PluginManagerMenuItem$1.run(PluginManagerMenuItem.java:38) [jmeter-plugins-manager-1.6.jar:?]

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.validator.PKIXValidator.doBuild(Unknown Source) ~[?:1.8.0_291]

Regards,

Ranga

DT

unread,

Oct 4, 2021, 1:40:32 PM10/4/21

to jmeter-plugins

It means that the plugins manager cannot securely connect to the plugins repository at https://jmeter-plugins.org/repo/

Most probably your company or ISP uses a MITM certificate to intercept secure traffic (and read your personal communication as well by the way including this question on this website)

You can install this certificate into Java truststore and configure JMeter to use this truststore via javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword parameters.

Alternatively you can set jpgc.repo.address JMeter property to point to http://jmeter-plugins.org/repo/, this way it will be HTTP, not HTTPS hence you won't get this PKIX path building exception.