Maven Selenium HTTPS

Question

Hi all,

I am testing my web application's security and all of my pages are served over ssl. The issue I am having is the certificate is not trusted as firefox starts in a new profile each time. I was reading on OpenQA's site about a jar and importing the certificate, but that is only for Internet Explorer and Firefox should automatically be handled.

Is there anything special I need to do in order for certificates to automatically be trusted?

Thanks, Walter

Answer 1

Create a new blank Firefox profile, accept the cert, and then use that as your profile.

Instructions here: http://townx.org/blog/elliot/dealing-self-signed-ssl-certificates-when-running-selenium-server-firefox

I realize you are using Maven, but in Ant you would:

<target name="selenium" description="Runs the QA Selenium HTML test suite">
  <mkdir dir="build/reports/selenium"/>
  <java jar="${selenium.dir}/selenium-server.jar" fork="true" spawn="false">
    <arg value="-htmlSuite"/>
    <arg value="*chrome"/>
    <arg value="${selenium.browser.url}"/>
    <arg value="selenium-test/testSuite.html"/>
    <arg value="build/reports/selenium"/>
    <arg value="-firefoxProfileTemplate"/>
    <arg value="selenium-test/sslSupport"/>
    <arg value="-trustAllSSLCertificates"/>
    <arg value="-timeout"/>
    <arg value="300000"/>
  </java>
</target>

I put the Firefox profile under selenium-test/sslSupport, selenium.dir is where selenium is installed, and selenium.browser.url is the URL to start the test at.

Answer 2

You can install the RCE (Remember Certificate Exception) Firefox add-on To a custom firefox profile, which will then accept all unknown certificates when they are encountered. You will need to modify any waitForPageToLoad commands though so that they allow for the certificate to be accepted. In my setup (Java/TestNG/Selenium RC) I have a waitForUnsecuredPageToLoad method that checks to see if the title of the loaded page is the certificate warning page, and if so I waitForPageToLoad again. It works well and is cross browser safe.

Answer 3

I am using HtmlUnit instead and while it does not really test browser compatibility, it does help ensure stuff works.

Walter

Answer 4

This can be done by starting up the Selenium server with the '-trustAllSSLCertificates' and configuring the browser to use the Selenium server as a proxy. Depending on how you set up Firefox, you can either use a custom profile to set up the proxy settings or use a custom browser launcher that can set that up for you.

I wrote up an article that goes into more details with some code samples:

http://mogotest.com/blog/2010/04/13/how-to-accept-self-signed-ssl-certificates-in-selenium

Hopefully that helps you out.