Forum Discussion

-TM-'s avatar
-TM-
Occasional Contributor
5 years ago

SSL Certificate verification missing

Hi Community,    I've been trying to get SoapUI 5.5. (OpenSource) to verify and reject my self-signed ssl server certificate for security reasons (self-signed, not trusted), just like other clients...
REST
Security
SSL
-TM-'s avatar
-TM-
Occasional Contributor
5 years ago

Hi Rao, 

 

thanks for your response. Unfortunately the linked documentation does not address my issue and the answer does not help me any further.  

 

I do need SoapUI to reject requests to untrusted, namely self-signed certificates on the server side. I do not get any warning.

    • -TM-'s avatar
      -TM-
      Occasional Contributor
      5 years ago

      Hi Rao, 

       

      thanks again, but the answer refers to AllertSite, which is not considered to be used during testphase of a developed microservice. I have tests defined in SoapUI, which must verify a given ssl-certificate. It is simply testable by using other tools, like curl, which rejects the request on default security level. But I have written my testcases in SoapUI and thought it would just have the abiltiy to verify untrusted ssl certificates.

       

      Regards, 

      TM

      • nmrao's avatar
        nmrao
        Champion Level 3
        5 years ago
        Sorry about it. Should have checked before sending info.

        In the preferences, there is File > Preferences > SSL Settings > Client Authentication check box, may be try checking with that.