Forum Discussion

nts_phi's avatar
nts_phi
Occasional Visitor
9 years ago

HTTPS Mock Services - Restrict to certain SSL/TLS Versions

Hi

 

I have setup up a number of secure mock services with 2-way-authentication. I also have a client application that consumes those services. I am trying to test handling and support for specific SSL/TLS-Versions and possible fallbacks.

 

Example: I tell the client to setup a tunnel using TLSv1.2 and want to see how it behaves if the server does not support it, because it only allows TLSv1.1.

 

The only answer I found so far, was to set: 

-Dsoapui.https.protocols=SSLv3, TLSv1.1

 

which does not seem to work. It still allows a TLSv1.2-connection.

 

Best regards

phi

1 Reply

  • Giangaspero's avatar
    Giangaspero
    Occasional Visitor

    Still no response on this topic?
    I have the same problem launching the mockservicerunner.sh on unix.

    I added -Dsoapui.https.protocols=TLSv1.2 to both the files:

    - SoapUI-5.4.0.vmoptions

    - mockservicerunner.sh

    but still does not work and TLSv1.0 still works