Client Certificates

A secure Web server can be configured to refuse clients that do not have a proper client certificate from a trusted certification authority. In such cases, the server asks the client to send its certificate before performing any requests. As long as the client certificate is signed by a trusted CA, the server does not care what the client is. If the Web server requests a client certificate, it is necessary to export the client certificate from the Web browser and place it in the Silk Performer certificate store to be used for recording and replay.

Handling client certificates with the Web browser

A secure Web server can be configured to refuse clients that do not have a proper client certificate from a trusted certification authority. If a Web server requests a client certificate, it is necessary to export the client certificate from the Web browser and place it in the Silk Performer certificate store.

Exporting client certificates

Since the Silk Performer Recorder works as a proxy between a client and a Web server, and the replay engine represents the simulated client itself, successful connection to the server requires a certificate from the client. Therefore the certificate must be exported by the Web browser and imported into Silk Performer.

Note: When obtaining a client certificate from a certification authority, be sure to allow the private keys to be exported with the certificate. Otherwise, the certificate will be useless for the Secure Internet Recorder.