Error -27778: SSL protocol error when attempting to connect with host <xyz.com> via vugen or performance center

[Sumit Agarwal]

Hi Guys,

I am getting this trouble when i am executing script in Vugen or Performance center. Although i have executed same script with 100 users some days ago successfully. But now i am facing this issue. I confirmed from App admin, he has updated license key to refresh database.

Please have a look at rcording logs -

[Network Analyzer (39d0:48e0)] Request Connection: Remote Server @ xxx.xxx.xxx.xxx:xxx   (Service=)  (Sid=123)  PROXIED!
[Web Request      (39d0:2ffc)] "GET /zyz.com/aspx_32x32.png"  
[Network Analyzer (39d0:2ffc)]   (Sid:121) Client -> Server @ : 1016 bytes (SSL)(Service=HTTP)
[Network Analyzer (39d0:26d0)]   (Sid:122) Negotiate Proxy -> Server SSL Handshake (ssl:TLSv1, ciphers:RC4-SHA)
[Network Analyzer (39d0:4980)]   (Sid:123) Negotiate Proxy -> Server SSL Handshake (ssl:TLSv1, ciphers:RC4-SHA)
[Network Analyzer (39d0:2ffc)]   (Sid:121) Server -> Client : 1009 bytes (SSL) (Service=HTTP)
[Network Analyzer (39d0:2ffc)]   (Sid:121) Connection Terminated (by Server)

We have not added any certificate earlier and it was working fine.Should we need to add Client certificate in LG?

Kindly suggest me solution? Thanks

[Carter, Rick]

Due to a vulnerability in the SSL V3 protocol, many sites have turned off SSL V3.

I have a standard #include file that I use in all my LoadRunner (11.0) scripts. I had to add this line at the top of the file to make them all work (if you don't have an #include file you'd have to add it to every script that failed individually):

web_set_sockets_option("SSL_VERSION", "TLS");

However, when I re-ran tests afterward, I found that throughput had substantially improved. I'm still looking at this, but my conjecture is that this reduced some SSL negotiation and fallback from happening and it was significant enough to speed up new connections. There may be a better way to have it negotiate properly the "new" way but I'm not well-versed enough in SSL at this point to know.

- Rick

--

Rick Carter
Application Systems Administrator Senior
Information and Technology Services
University of Michigan
rkca...@umich.edu
734-647-5941

--
You received this message because you are subscribed to the Google Groups "LoadRunner" group.
To unsubscribe from this group and stop receiving emails from it, send an email to LR-LoadRunne...@googlegroups.com.
To post to this group, send email to LR-Loa...@googlegroups.com.
Visit this group at http://groups.google.com/group/LR-LoadRunner.
For more options, visit https://groups.google.com/d/optout.

[Sumit]

Hi Rick,

I checked this post today only. But many thanks. This method works for me however i did not compare throughput with previous execution. I will definitely look into this. Thanks again. Let me know if you find anything in it.