Hi Rupert, thanks for your reply
i followed the instruction at this page "https://www.tbs-certificates.co.uk/FAQ/en/626.html" to create .jsk file, then i followed the instruction at "http://geekswithblogs.net/gvdmaaden/archive/2011/02/24/how-to-configure-soapui-with-client-certificate-authentication.aspx" for configuring certificate selecting the .jsk file, but the problem remain the same..
any other idea ?
thanks in advanceù
Hi,
OK, sorry, I may have jumped to the wrong conclusion.
It looks like there may be some issue parsing the WSDL, the error mentions CDATA - I assume it loads OK in a browser?
Are there any other error details? Maybe a stack trace in the error log tab?
Regards,
Rupert
Hi Rupert
here HTTP LOG:
Thu Jul 07 15:42:27 CEST 2016:DEBUG:>>"GET /V_DELORD01_1_0_MYC_WSCNSService/V_DELORD01_1_0_MYC_?wsdl HTTP/1.1[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:>> "Host: ww_tst.mydom.com[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:>> "Connection: Keep-Alive[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:>> "User-Agent: Apache-HttpClient/4.1.1 (java 1.5)[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:>> "[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "HTTP/1.1 403 Forbidden[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Date: Thu, 07 Jul 2016 13:43:16 GMT[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Content-Length: 74[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Keep-Alive: timeout=5, max=100[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Connection: Keep-Alive[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "Content-Type: text/html; charset=iso-8859-1[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "[\r][\n]"
Thu Jul 07 15:42:27 CEST 2016:DEBUG:<< "You need a client side certificate issued by MyFirm CA to access this site"
here ERROR LOG
Thu Jul 07 15:42:27 CEST 2016:ERROR:com.eviware.soapui.impl.support.definition.support.InvalidDefinitionException
com.eviware.soapui.impl.support.definition.support.InvalidDefinitionException
at com.eviware.soapui.impl.wsdl.support.wsdl.WsdlLoader.makeInvalidDefinitionException(WsdlLoader.java:119)
at com.eviware.soapui.impl.wsdl.support.wsdl.WsdlLoader.loadXmlObject(WsdlLoader.java:109)
at com.eviware.soapui.impl.wsdl.support.xsd.SchemaUtils.getDefinitionParts(SchemaUtils.java:488)
at com.eviware.soapui.impl.wsdl.support.xsd.SchemaUtils.getDefinitionParts(SchemaUtils.java:477)
at com.eviware.soapui.impl.support.definition.support.AbstractDefinitionCache.update(AbstractDefinitionCache.java:94)
at com.eviware.soapui.impl.support.definition.support.AbstractDefinitionContext$Loader.construct(AbstractDefinitionContext.java:209)
at com.eviware.soapui.support.swing.SwingWorkerDelegator.construct(SwingWorkerDelegator.java:46)
at com.eviware.soapui.support.swing.SwingWorker$2.run(SwingWorker.java:131)
at java.lang.Thread.run(Unknown Source)
here SOAPUI LOG
Thu Jul 07 15:42:27 CEST 2016:DEBUG:Getting wsdl component from [https://xxxxxx...?wsdl]
Thu Jul 07 15:42:27 CEST 2016:DEBUG:Attempt 1 to execute request
Thu Jul 07 15:42:27 CEST 2016:DEBUG:Sending request: GET /xxxxxxxxx....?wsdl HTTP/1.1
Thu Jul 07 15:42:27 CEST 2016:DEBUG:Receiving response: HTTP/1.1 403 Forbidden
Thu Jul 07 15:42:27 CEST 2016:DEBUG:Connection can be kept alive for 5000 MILLISECONDS
Thu Jul 07 15:42:27 CEST 2016:ERROR:Failed to load url [https://xxxxxxxxxxxx?wsdl]
Thu Jul 07 15:42:27 CEST 2016:ERROR:An error occurred [com.eviware.soapui.impl.support.definition.support.InvalidDefinitionException], see error log for details
Thu Jul 07 15:42:35 CEST 2016:DEBUG:Connection closed
thanks
I forgot
in the browser i can see the Wsdl .. so in the browser it works
thanks
OK, it seems to have an issue with your client certificate:
'You need a client side certificate issued by MyFirm CA to access this site'
I take it you included this exact client certificate in the .jks keystore that you configured in the SoapUI Settings?
If not, I was expecting an error more like:
javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
you can take a look in the keystore with the following command:
keytool -list -v -keystore server.jks -storepass password
I also presume you loaded the client certificate into the browser? Otherwise that wouldnt be able to see the WSDL either.
Hi Rupert
i run the command "keytool -list -v -keystore server.jks -storepass password" and i see the right data.
i confirm that in the browser i installed the certificate .
Questions :
when i use .jks file, i need to follow which of two links:
1- https://www.soapui.org/soapui-projects/ws-security.html
1 or 2 or is the same ?
thanks
