How to get SSL client certificates to work with soapUI

Open Source SoapUI OS
, ,
1

Originally posted by Daniel_Twum on July 16, 2007

I have been searching the forums on how to get SSL client certs to work with soapUI. I have specified the keystore and password but it does not look like soapUI is presenting the client certificate during SSL negotiations.

Is this a supported feature? If it is, can you specify the steps to follow to get this feature working?

Thanks,
–Daniel

2

Originally posted by omatzura on July 16, 2007

Hi Daniel,

this is how it is supposed to work.. which soapUI version are you using?

You can also try your certificate by specifying it directly in the keystore setting (ie specify the certificate file instead of the keystore)..

Please try 1.7.5 beta2 which has updated SSL support.. also please note if you are getting any errors in the log when specifying the certificate..

regards!

/Ole
eviware.com

3

Originally posted by Daniel_Twum on July 23, 2007

Hi Ole,

I am using soapui v 1.7.

I noticed that when I display the contents of my keystore file,
it shows mykey as a trustedCertEntry - I had read somewhere
that mykey needs to be a keyEntry and gave a command using
openssl on how to convert the crt cert file into a .cer or .der that
soapui will use.

Any more info on this?

thanks,
–Daniel

C:\MNG\certificates>keytool -list
Enter keystore password: fidelity

Keystore type: jks
Keystore provider: SUN

Your keystore contains 1 entry

mykey, Jul 23, 2007, trustedCertEntry,
Certificate fingerprint (MD5): 8A:FA:C1:0D:D0:D2:6E:11:DB:91:0B:4C:8C:BD:44:91

4

Originally posted by omatzura on July 23, 2007

Hi Daniel,

thanks for your feedback.. Would it be possible for you to try this with the beta2 version of soapUI 1.7.5 which has an updated ssl-library for reading and negotiating keys.. (and we could continue our error-search from there if it doesn’t work).. let me know!

kind regards,

/Ole
eviware.com

5

Originally posted by Daniel_Twum on July 23, 2007

Hi Ole,

I have installed soapUI 1.7.5 Pro beta and the same issue occurs.
I had listed the contents of the .keystore file in the prior posting.

It seems soapUI has a problem reading the keystore with the error:

2007-07-23 17:06:09,955 INFO [HttpClientSupport$Helper] Updating keyStore..
2007-07-23 17:06:09,971 ERROR [HttpClientSupport$Helper] Failed to load KeyMaterial [C:\Documents and Settings\A416304.keystore] org.apache.commons.ssl.ProbablyBadPasswordException: Probably bad JKS password: java.io.IOException: Keystore was tampered with, or password was incorrect
2007-07-23 17:06:09,971 INFO [HttpClientSupport$Helper] Updating keyStore..
2007-07-23 17:06:09,971 ERROR [HttpClientSupport$Helper] Failed to load KeyMaterial [C:\Documents and Settings\A416304.keystore] java.security.KeyStoreException: No private keys found in keystore!

6

Originally posted by omatzura on July 23, 2007

Hi Daniel,

thanks.. we’ll look into this and I’ll get back to you..

one question: can you mail me the keystore for debugging? ([email protected]) .. of course it’s perfectly understandable if you cant :slight_smile:

regards!

/Ole
eviware.com

7

Originally posted by ven on August 27, 2007

Hi Daniel ,

I am also facing the same issue ,whenever i import the keystore soap ui says no private key found.

Just wondering if u happen to have a solution for this .

Hey Ole,

Can u pls let me know if there is any way out .

thanks

8

Originally posted by omatzura on August 27, 2007

Hi!

you need to import both the certificate and the private key into your keystore, which isn’t as easy as it sounds :wink: Fortunately, there is help at hand at http://www.agentbob.info/agentbob/79.html (credit to Daniel who found this link..)

Hope this helps!

regards,

/Ole
eviware.com

9

Originally posted by khou1980 on February 28, 2011

But what if I don’t have a private key only have company issued root certificate and client authentification certificate, how do I wrap thest two certificats to create keystore file?

Thanks

Kevin

10

Originally posted by Kumarpsk on May 18, 2011

Hi

I have the same issue
Wed May 18 11:10:24 EDT 2011:ERROR:org.apache.commons.ssl.ProbablyBadPasswordException: Probably bad PKCS12 password: java.io.IOException: failed to decrypt safe contents entry: java.lang.ArithmeticException: / by zero

I tried to convert .pem files to .der format. cert file converted but not the key file. Key file after conversion it shows 0kb.

Can you please help if you already got the solution.

Thanks
Kumar

11

Originally posted by JWoodruff on June 17, 2011

Greetings Everyone,

I have posted a walkthough on this topic http://nerdtalking.blogspot.com/2011/06/using-client-certificate-with-soapui.html. Hope this helps!

Enjoy!

-JW

12

Originally posted by renatofagalde on September 13, 2011

We can’t import the WSDL necessary to load with digital certificate(pfx).
Importing throw browser and choose my certificate and it works.

We tried following steps on http://www.soapui.org/SOAP-and-WSDL/app … urity.html, but with not successful
Error: com.eviware.soapui.impl.support.definition.support.InvalidDefinitionException
After that we tried that steps http://nerdtalking.blogspot.com/2011/06 … oapui.html

Also got the same error.

Regards