How can I record an application which is using OCSP security with the help of JMeter?

I am not able to record the application i.e. a native app with the help of JMeter as it is using OCSP protocol for security.


You need to add JSR223 samplers or Beanshell samplers to encode and decode reqest and responce, with help of open source third-party Java library from Bouncy castle.

Follow this steps to record application requests which is using OCSP:

Check this guides for more information :

  • 1
    Can you elaborate on your answer that almost entirely does contain software recommendation links? I also think you misunderstood the question. I think the question does ask how to spoof an OSCP response rather than load testing an OSCP server.
    – Tobi Nary
    Jan 30 '19 at 8:13
  • Probably you are right but author does not tell about spoofing directly. He asks about how to record requests from apllications with OCSP using JMeter. So, the guide describe steps to do so. I think there is no need to copypaste steps from that guide to here, or it is ok? Jan 30 '19 at 8:41
  • Answers are meant to be self-contained and not only a collection of links - links can be outdated and/or go dead.
    – Tobi Nary
    Jan 30 '19 at 8:45
  • hm, yes, it make sence for now, thanks for your explanation! Jan 30 '19 at 8:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.