从Postman vs Visual Studio Webtest调用REST API

Question

我面临一个奇怪的问题，我能做到这一点(https://my.factcorp.com/ABCorp/Reporting/api/Events/)来自POSTMAN的RESTAPI调用，但不是来自VisualStudioWeb测试。

收到https://my.factcorp.com/ABCorp/Reporting/api/Events/ HTTP/1.1

主持人：my.factcorp.com

连接：保持活力

授权：基本

缓存控制：没有缓存

User-Agent： Mozilla/5.0（Windows NT 10.0； Win64； x64）AppleWebKit/537.36（KHTML， like Gecko）Chrome/54.0.2840.71Safari /537.36

邮递员代币：4dfaa309-c7d8-6785-d59c-9679ad4f3aaa

接受：/

接受编码：gzip、deflate、sdch、br

接受语言：en-US，en；q=0.8

然而，当我从Webtest调用同一个RESTAPI时，下面是一个错误

请求失败：远程主机强制关闭了现有连接

我可以看到邮递员在请求中添加了一些额外的头，我还尝试手动添加所有这些头。

任何想法都值得赞赏。

谢啦

Answer 1

实际上找到了根本原因，即为什么从Postman而不是VS WebTest成功调用。

原因是邮递员足够聪明，可以将请求安全性更正为（TLS/1.2）

然而WebTest无法做到这一点，因为它使用较低级别的System.Net协议。

现在要解决这个问题，我们可以编写自定义WebTest插件，它可以覆盖默认的安全行为。

using System;
using System.ComponentModel;
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;
using Microsoft.VisualStudio.TestTools.WebTesting;

namespace MyWebTest
{
    [Description("This plugin will force the underlying System.Net ServicePointManager to negotiate downlevel SSLv3 instead of TLS. WARNING: The servers X509 Certificate will be ignored as part of this process, so verify that you are testing the correct system.")]
    public class TLS12ForcedPlugin : WebTestPlugin
    {

        [Description("Enable or Disable the plugin functionality")]
        [DefaultValue(true)]
        public bool Enabled { get; set; }

        public override void PreWebTest(object sender, PreWebTestEventArgs e)
        {
            base.PreWebTest(sender, e);

            //For TLS
            ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;

            //For SSL
            //ServicePointManager.SecurityProtocol = SecurityProtocolType.Ssl3;

            //we wire up the callback so we can override  behavior and force it to accept the cert
            ServicePointManager.ServerCertificateValidationCallback = RemoteCertificateValidationCB;

            //let them know we made changes to the service point manager
            e.WebTest.AddCommentToResult(this.ToString() + " has made the following modification-> ServicePointManager.SecurityProtocol set to use SSLv3 in WebTest Plugin.");
        }
        public static bool RemoteCertificateValidationCB(Object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
        {
            //If it is really important, validate the certificate issuer here.
            //this will accept any certificate
            return true;
        }
    }
}