Master
ThoughtWorks
Menu
Close
  • What we do
    • Go to overview
    • Customer Experience, Product and Design
    • Data Strategy, Engineering and Analytics
    • Digital Transformation and Operations
    • Enterprise Modernization, Platforms and Cloud
  • Who we work with
    • Go to overview
    • Automotive
    • Healthcare
    • Public Sector
    • Cleantech, Energy and Utilities
    • Media and Publishing
    • Retail and E-commerce
    • Financial Services and Insurance
    • Not-for-profit
    • Travel and Transport
  • Insights
    • Go to overview
    • Featured

      • Technology

        An in-depth exploration of enterprise technology and engineering excellence

      • Business

        Keep up to date with the latest business and industry insights for digital leaders

      • Culture

        The place for career-building content and tips, and our view on social justice and inclusivity

    • Digital Publications and Tools

      • Technology Radar

        An opinionated guide to technology frontiers

      • Perspectives

        A publication for digital leaders

      • Digital Fluency Model

        A model for prioritizing the digital capabilities needed to navigate uncertainty

      • Decoder

        The business execs' A-Z guide to technology

    • All Insights

      • Articles

        Expert insights to help your business grow

      • Blogs

        Personal perspectives from ThoughtWorkers around the globe

      • Books

        Explore our extensive library

      • Podcasts

        Captivating conversations on the latest in business and tech

  • Careers
    • Go to overview
    • Application process

      What to expect as you interview with us

    • Grads and career changers

      Start your tech career on the right foot

    • Search jobs

      Find open positions in your region

    • Stay connected

      Sign up for our monthly newsletter

  • About
    • Go to overview
    • Our Purpose
    • Awards & Recognition
    • Diversity & Inclusion
    • Our Leaders
    • Partnerships
    • News
    • Conferences & Events
  • Contact
Global | English
  • United States United States
    English
  • China China
    中文 | English
  • India India
    English
  • Canada Canada
    English
  • Singapore Singapore
    English
  • United Kingdom United Kingdom
    English
  • Australia Australia
    English
  • Germany Germany
    English | Deutsch
  • Brazil Brazil
    English | Português
  • Spain Spain
    English | Español
  • Global Global
    English
Blogs
Select a topic
View all topicsClose
Technology 
Agile Project Management Cloud Continuous Delivery  Data Science & Engineering Defending the Free Internet Evolutionary Architecture Experience Design IoT Languages, Tools & Frameworks Legacy Modernization Machine Learning & Artificial Intelligence Microservices Platforms Security Software Testing Technology Strategy 
Business 
Financial Services Global Health Innovation Retail  Transformation 
Careers 
Career Hacks Diversity & Inclusion Social Change 
Blogs

Topics

Choose a topic
  • Technology
    Technology
  • Technology Overview
  • Agile Project Management
  • Cloud
  • Continuous Delivery
  • Data Science & Engineering
  • Defending the Free Internet
  • Evolutionary Architecture
  • Experience Design
  • IoT
  • Languages, Tools & Frameworks
  • Legacy Modernization
  • Machine Learning & Artificial Intelligence
  • Microservices
  • Platforms
  • Security
  • Software Testing
  • Technology Strategy
  • Business
    Business
  • Business Overview
  • Financial Services
  • Global Health
  • Innovation
  • Retail
  • Transformation
  • Careers
    Careers
  • Careers Overview
  • Career Hacks
  • Diversity & Inclusion
  • Social Change
Software TestingTechnology

Twist 2.5: Support for testing Secure sites

Sadique Ali Sadique Ali

Published: Dec 13, 2012

Twist 2.5 has greatly improved support for testing secure web applications using the Sahi driver. Testing secure sites with Sahi has not always been a pleasure. It involved accepting the Sahi generated certificates for each of the secure sites that your application loads resources from.

For example, if your application at https://example.com had jQuery loaded from the Google CDN, a bunch of images from your company's CDN and Twitter bootstrap hosted on Github, you would end up adding Sahi generated certificates for the following domains:

  • ajax.googleapis.com
  • example.com
  • cdn.example.com
  • raw.github.com

This is harder if you are doing Continuous Integration and you have a number of environments where your tests are executed. This has been an issue that Twist users wanted us to solve and we are happy to announce that we have significantly improved this experience.

From Twist 2.5 onwards, Twist adds it's certificate to your system the moment you create a Sahi project. This certificate is a Certificate Authority (CA) certificate and every single certficate generated by Sahi for various domains will be automatically signed with the TWist certificate. The implication of this is that you no longer have to accept any of the certificates for the individual domains from which your application loads resources from.

Creating a project

When you create a new Sahi project on your development box, Twist tries to install it's CA certificate. Since this is an action that needs Administrative privileges, your Operating System may ask you to authenticate the action using your password.

Once the project is created, testing any secure web application is easy and you don't have to do anything additional.

The next time you create a project, since you already have the CA certificate Twist will not attempt to install it again.

CI environments

This new release also makes it easier to execute the tests on Continuous Integration environments. Instead of having to accept each of the individual certificates, you can install the CA certificate.

The certificate twist-ca.crt can be found under the sahi/userdata directory in your project's base directory. This can be installed using the following utilities:

Mac OS X

You can install the certificate using the security utility.

security add-certificate twist-ca.crt security add-trusted-cert twist-ca.crt

Windows

You can install the certificate using the certutil.exe utility.

certutil.exe -addstore -user root twist-ca.crt

Linux

You can install the certificate using certutil

certutil -A -d sql:~/.pki/nssdb -t C -n "Certificate Common Name" -i twist-ca.crt

Notes

Linux

On Linux distributions, the certutil utility does not come pre-packaged. you will need to install it from Mozilla.

Firefox

If you are testing only on Firefox, you will not have to install the CA certificate on any of the environments. This is because Twist launches Firefox withe a profile that already contains the certificate.

Twist 2.5 also includes improvements to share data between workflows, explore fixtures and collate verification failures without halting the scenario.

Try Twist now to improve test automation and fine-tune your CD process.

Master
Privacy policy | Modern Slavery statement | Accessibility
Connect with us
×

WeChat

QR code to ThoughtWorks China WeChat subscription account
© 2021 ThoughtWorks, Inc.