Cannot connect to SSL enabled Oracle DB using JMeter

Question

I am trying to connect SSL enabled Oracle DB using JMeter. Below are the steps I followed.

1. Converted the client side certificate to .JKS format and placed this .JKS in JMeter bin folder

2. Set the below values in system.properties

3. javax.net.ssl.keyStore=myCert.jks

4. javax.net.ssl.keyStorePassword=JKSpassword

5. Copied ojdbc10 jar in JMeter/lib folder

JDBC config as below

However, I'm getting the below error:

Cannot create PoolableConnectionFactory (IO Error: IO Error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, Authentication lapse 0 ms.)

Appreciate any lead.

Answer 1

Error PKIX path building failed indicates certificate error (i.e. missing certificate in chain, expired, self-signed, etc.), however it's a generic message which doesn't tell what's wrong exactly.

You might want to add the next line to system.properties file:

javax.net.debug=all

and once you figure out what's wrong you should be able to amend JMeter configuration accordingly. For instance if your Oracle installation uses a custom self-signed certificate which is not known by any CA you will need to import this certificate into truststore and make JMeter aware of this truststore via javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword properties

More information:

• Difference Between a Java Keystore and a Truststore
• Apache JMeter Properties Customization Guide
• SSL Wit Oracle JDBC Thin Driver