Forum Discussion

srjturner's avatar
srjturner
New Member
10 years ago

When will SoapUI support SNI?

We have multiple sites exposed on the same IP and port over TLS, with clients using SNI to indicate which site (which host) they are intending to connect to. When testing APIs with SoapUI the TLS con...
JKambli's avatar
JKambli
Staff
10 years ago

Hi,

 

For TLS, in your installation folder in vmoptions file add,

-Dsoapui.https.protocols=TLSv1.2

 

Close and open SoapUI pro.

 

Thanks,
Jeshtha

  • GeorgesAbitbol's avatar
    GeorgesAbitbol
    Occasional Visitor
    10 years ago

    Hello,

     

    Same problem here : SOAPUI (v.5.1.3) does not send "server_name" extension in its client hello message during SSL handshake and therefor SSL connection fails.

     

    Tried to add "-Dsoapui.https.protocols=TLSv1.2" in the VM options file, without success.

     

    Does anyone known how to support this SNI feature with SOAPUI client?

     

    Thank you in advance...

    Georges Abitbol

    • dmitriy_fot's avatar
      dmitriy_fot
      Visitor
      9 years ago

      hi,

       

      I am having the same issue. Tried with Java 7 and 8. server_name extension is not set and handshake fails.

      It looks like this JDK bug can be a reason: 

       

      https://bugs.openjdk.java.net/browse/JDK-8072464

       

      SmartBear, could you respond to it, using HTTPS endpoints has become impossible for out tests.

       

      SSL Output:

       

      Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2, secp192r1, secp224r1, sect233k1, sect233r1, sect283k1, sect283r1, secp384r1, sect409k1, sect409r1, secp521r1, sect571k1, sect571r1, secp160k1, secp160r1, secp160r2, sect163r1, secp192k1, sect193r1, sect193r2, secp224k1, sect239k1, secp256k1}
      Extension ec_point_formats, formats: [uncompressed]
      Extension signature_algorithms, signature_algorithms: SHA512withECDSA, SHA512withRSA, SHA384withECDSA, SHA384withRSA, SHA256withECDSA, SHA256withRSA, SHA224withECDSA, SHA224withRSA, SHA1withECDSA, SHA1withRSA, SHA1withDSA
      ***
      main, WRITE: TLSv1.2 Handshake, length = 193
      main, READ: TLSv1.2 Alert, length = 2
      main, RECV TLSv1.2 ALERT: fatal, handshake_failure
      main, called closeSocket()
      main, handling exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      main, called close()
      main, called closeInternal(true)
      11:49:12,051 DEBUG [SoapUIMultiThreadedHttpConnectionManager$SoapUIDefaultClientConnection] I/O error closing connection
      javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

      Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2, secp192r1, secp224r1, sect233k1, sect233r1, sect283k1, sect283r1, secp384r1, sect409k1, sect409r1, secp521r1, sect571k1, sect571r1, secp160k1, secp160r1, secp160r2, sect163r1, secp192k1, sect193r1, sect193r2, secp224k1, sect239k1, secp256k1}
      Extension ec_point_formats, formats: [uncompressed]
      Extension signature_algorithms, signature_algorithms: SHA512withECDSA, SHA512withRSA, SHA384withECDSA, SHA384withRSA, SHA256withECDSA, SHA256withRSA, SHA224withECDSA, SHA224withRSA, SHA1withECDSA, SHA1withRSA, SHA1withDSA
      ***
      main, WRITE: TLSv1.2 Handshake, length = 193
      main, READ: TLSv1.2 Alert, length = 2
      main, RECV TLSv1.2 ALERT: fatal, handshake_failure
      main, called closeSocket()
      main, handling exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      main, called close()
      main, called closeInternal(true)
      11:49:12,051 DEBUG [SoapUIMultiThreadedHttpConnectionManager$SoapUIDefaultClientConnection] I/O error closing connection
      javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure