Forum Discussion

tong123123's avatar
tong123123
New Contributor
10 years ago

why no specify truststore but still work in soap ui 5.1.3

in SOAPUI 5.1.3, preferences > SSL Settings, I have set keystore but not truststore (also no place to set truststore in ssl settings), then I connect to https server, but it works, why SOAPUI 5.1.3 d...
  • rupert_anderson's avatar
    rupert_anderson
    10 years ago

    Hi,

    Presumably to make testing SSL secured web services a little easier for SoapUI, a custom SSLSocketFactory (SoapUISSLSocketFactory) has been written to override the checkServerTrusted methods to do nothing. This means that SoapUI will trust any SSL protected service without the need to import the service's SSL certificate into a SoapUI truststore. 

     

    Hope this helps,

    Cheers,

    Rupert

rupert_anderson's avatar
rupert_anderson
Valued Contributor
10 years ago

Hi,

Presumably to make testing SSL secured web services a little easier for SoapUI, a custom SSLSocketFactory (SoapUISSLSocketFactory) has been written to override the checkServerTrusted methods to do nothing. This means that SoapUI will trust any SSL protected service without the need to import the service's SSL certificate into a SoapUI truststore. 

 

Hope this helps,

Cheers,

Rupert

  • tong123123's avatar
    tong123123
    New Contributor
    10 years ago

    then when I set keystore in preference > ssl settings, what has been done behind?

    System.setProperty(" javax.net.ssl.keystore", xxx)?

     

    Can I see in code that how soapUI 5.1.3 has created "custom SSLSocketFactory (SoapUISSLSocketFactory) has been written to override the checkServerTrusted methods to do nothing"?