Forum Discussion

-TM-'s avatar
-TM-
Occasional Contributor
5 years ago

SSL Certificate verification missing

Hi Community,    I've been trying to get SoapUI 5.5. (OpenSource) to verify and reject my self-signed ssl server certificate for security reasons (self-signed, not trusted), just like other clients...
REST
Security
SSL
-TM-'s avatar
-TM-
Occasional Contributor

Hi Rao, 

 

thanks for your response. Unfortunately the linked documentation does not address my issue and the answer does not help me any further.  

 

I do need SoapUI to reject requests to untrusted, namely self-signed certificates on the server side. I do not get any warning.

  • -TM-'s avatar
    -TM-
    Occasional Contributor
    5 years ago

    Hi Rao, 

     

    thanks again, but the answer refers to AllertSite, which is not considered to be used during testphase of a developed microservice. I have tests defined in SoapUI, which must verify a given ssl-certificate. It is simply testable by using other tools, like curl, which rejects the request on default security level. But I have written my testcases in SoapUI and thought it would just have the abiltiy to verify untrusted ssl certificates.

     

    Regards, 

    TM

    • nmrao's avatar
      nmrao
      Champion Level 3
      5 years ago
      Sorry about it. Should have checked before sending info.

      In the preferences, there is File > Preferences > SSL Settings > Client Authentication check box, may be try checking with that.
      • -TM-'s avatar
        -TM-
        Occasional Contributor
        5 years ago

        Hi Rao, 

         

        thanks. Client Authentication with ssl certificate is not the usecase, ssl settings do not contain any setting as far as I can see.