JMeter代理配置在Chrome 57.0.2987.133（64位）失效求助

Hey Sandeep, I’ve dealt with this exact frustrating issue before when configuring JMeter certificates for browser testing. Let’s walk through actionable steps to resolve the "Your connection is not private" error you’re seeing:

1. Confirm if Your JMeter Certificate Is Actually Revoked #

• Open MMC, navigate to Certificates (Local Computer) → Trusted Root Certification Authorities → Certificates.
• Locate your imported JMeter certificate, right-click it → Properties → Details tab.
• Look for the Revocation Status field. If it shows "Revoked", your current certificate is invalid and needs replacement:
  • Open JMeter, go to Options → SSL Manager.
  • Click the Create button to generate a fresh root certificate, then export it as a .cer file.
  • Delete the old revoked certificate from MMC, then import the new one into the same Trusted Root Certification Authorities store.

2. Temporarily Disable Certificate Revocation Check (For Testing) #

This quick test will confirm if revocation checks are the root cause:

• Chrome: Type chrome://flags/#check-certificate-revocation into the address bar. Set the flag to Disabled, restart Chrome, and test your app URL again.
• Important Note: Don’t leave this disabled long-term—it weakens browser security. Re-enable it once you fix the core issue.

3. Double-Check Cross-Certificate and URL Matching #

• Ensure the app URL you added to the cross-certificate tab is an exact match, including protocol (https://) and port number (if applicable). For example, https://myapp.local:8443 can’t be shortened to myapp.local.
• Verify your JMeter certificate has a complete chain. When exporting from JMeter, choose to export the full certificate chain (use .pfx if you need the private key, or .cer for the public cert) and re-import it into MMC.

4. Clear Browser and System Certificate Caches #

Outdated cached data might be causing false positives:

• Browser Cache: Press Ctrl+Shift+Delete to open the clear data menu. Select "Cached images and files" and "Cookies and other site data", then clear. Restart your browser.
• Windows Certificate Cache: Open Command Prompt as Administrator and run:

  certutil -urlcache * delete
  

  This clears stale CRL (Certificate Revocation List) data that could be triggering the error.

5. Check Access to the CRL Server #

Sometimes the issue is that your system can’t reach the CRL server listed in the certificate:

• Go back to your JMeter certificate’s Details tab, find the CRL Distribution Points field. Copy the URL listed there.
• Try accessing that URL in your browser. If it fails to load, adjust your network settings (like proxy configurations) to allow access to the CRL server, or set up a local CRL cache for offline use.

内容的提问来源于stack exchange，提问作者Sandeep Lohar