Forum Discussion

wilberforce's avatar
wilberforce
New Contributor
16 years ago

ws with ssl and client certificates

Hi,

I am trying to call a webservice using ssl. Client shall be authorized with a client certificate. I have created a keystore with the required client certificate. I have used global preferences dialog to point to this keystore and I have activated "requires client authentication". I can see in to log

2010-07-05 14:10:31,792 INFO [HttpClientSupport$Helper] Updating keyStore..
2010-07-05 14:10:31,792 INFO [HttpClientSupport$Helper] Initializing KeyStore

Now if I call the service I get

2010-07-05 14:48:08,862 INFO [AbstractHttpRequestDesktopPanel] Error getting response for [Confirmation_OutBinding.Confirmation_Out:Request 1]; java.net.ConnectException: Connection refused: connect

I suspect that the client certificate has not been included in the call. Is there a way to check if the certificate has been included?

How does the dropdown box "SSL Keystore" in the request properties work (I can not see any values in the dropdown box)?

5 Replies

  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    Icon for Alumni rankAlumni
    16 years ago
    Hi!

    the connection-refused error rather indicates that soapUI can not access the target service, maybe due to some network error (firewall?) or misconfiguration.. (wrong url?). Could that be the case?

    regards!

    /Ole
    eviware.com
  • wilberforce's avatar
    wilberforce
    New Contributor
    16 years ago
    I have checked the logs of the internet communication manager:

    [Thr 1084246336] <<- SapSSLSessionStart(sssl_hdl=1061310)==SAP_O_K
    [Thr 1084246336] status = "new SSL session, NO client cert"

    So I am pretty sure no client cert has been indluded in the request. Is there a way to trace additional information in soap ui?
  • rmardeni's avatar
    rmardeni
    16 years ago
    I was able to get a WS with client certificate to work following the following steps:

      Add the certificate to be used to the "Security Configurations" tab of the project (DO NOT CREATE Outgoing or Ingoing security configurations).

      For the requests, there is a property called "SSL Keystore" that must be assigned to the proper certificate.


    And that is it, it works. The online documentation is not clear and not precise enough in such a simple setting. Hope this helps.
  • sdgeu2jts's avatar
    sdgeu2jts
    16 years ago
    wilberforce wrote:

    How does the dropdown box "SSL Keystore" in the request properties work (I can not see any values in the dropdown box)?


    If this is the case; that the dropdown box for the request property "SSL Keystore" is blank, then your Project SecurityConfigurations Keystores/Certificate entry is not configured correctly (or no crypto's have been added). Is the 'Status' set to 'OK' for your client cert's keystore (pfx in W32).
  • vacao's avatar
    vacao
    15 years ago
    I'm a bit confused on one thing -- the project (and global) setting is labeled "keystore" but people keep refer to putting your "certificate" in this field. Are you referring to your certificate in your keystore, not an exported ".cer" file?

    I'm still having trouble with this....