Forum Discussion

frankarico's avatar
15 years ago

Protecting WSS Passwords in SOAP UI Project files

We want to buy SOAP UI PRO but our company's security polciy say no passwords can be stored in clear text. WSS Passwords are stored by default in the project file. There is an option to encrypt the SOAP UI project file from within SOAPUI.
Question:
What security algorithm is used and what is the cipher strength ?

I see there are also ways to set passwords dynamically from the SoapUILoadTestRunner class. Would this be a better option than just encrypting the entire file ?

2 Replies

  • Hi!

    soapUI uses the PBE encryption provided by the not-yet-commons-ssl library (http://juliusdavies.ca/commons-ssl/pbe.html), it uses DES-3 (168 bit keys) by default.

    You could definitely have passwords stored externally and create a script in soapUI that reads and sets them accordingly when running your tests.

    regards!

    /Ole
    eviware.com
  • SilverJA's avatar
    SilverJA
    New Contributor
    Is the PBE encryption level still the same in version 4.5.1?