Forum Discussion

saliaz's avatar
saliaz
Occasional Visitor
8 years ago

SOAP/HTTPS -SSL Issue - Extension unknown: DER encoded OCTET

 

SOAPUI 5.2.1 (Open Source) on Windows 7 Enterprise

 

Hi,

 

We have a SOAP based web service running on HTTPS on a remote server with the SSL Key signed by the internal CA.

 

I downloaded the WSDL using the IE Browser over HTTPS and saved it into a file.

 

Created new SOAPUI project using the WSDL file created in previous step with sample request messages created automatically.

 

I installed client certificate as .PFX file in a local directory and updated global SSL Settings (File --> Preferences--> SSL Settings) pointing to the client.pfx file with password, also checked 'client authentication' box.

 

Also edited SOAPUI-5.2.1.vmoptions with following parameter:

 

-Dsun.security.ssl.allowUnsafeRenegotiation=true

 

and edited soapui.bat with JAVA_OPTS with:

 

-Dsoapui.https.protocols=TLSv1.2,TLSv1, SSLv3

-Dsoapui.https.ciphers=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

 

When I invoke the web service I get HTTP/1.1 200 OK in response header but I do not see anything in the response window which remains blank. There is also nothing in the 'error log'.

 

when I look into the 'SSL info(1 certs)' and inspect it I can see certificate details with one interesting entry which says:

 

[2]: ObjectId: 1.3.6.1.4.1.311.21.7 Criticality=false

Extension unknown: DER encoded OCTET String =

 

There are total 8 Certificate Extensions in the SSL Info (1 certs) tab.

 

Need help resolve this error as we cannot make any progress. Really appreciate your help!

 

Many Thanks!

 

Salman

 

 

 

 

 

 

No RepliesBe the first to reply