SSL Certificate verification missing

Question

Hi Community,&nbsp;&nbsp;I've been trying to get SoapUI 5.5. (OpenSource) to verify and reject my self-signed ssl server certificate for security reasons (self-signed, not trusted), just like other clients do. Where can I switch the behavior between test and live environment? I need the verification enabled. In my case soapui just accepts the connection and does not even notify about any security issues.&nbsp;I have searched the database but didn't find much information.&nbsp;Thanks in advance.

nmrao · Answer

Please see if the below documentation is helpfulhttps://www.soapui.org/docs/functional-testing/sending-https-requests.html

-tm- · Answer

Hi Rao,&nbsp;&nbsp;thanks for your response. Unfortunately the linked documentation does not address my issue and the answer does not help me any further.&nbsp;&nbsp;&nbsp;I do need SoapUI to reject requests to untrusted, namely self-signed certificates on the server side. I do not get any warning.

nmrao · Answer

Ok. Try this if not already tried.https://support.smartbear.com/alertsite/docs/configure/ssl-certificates.html

-tm- · Answer

Hi Rao,&nbsp;&nbsp;thanks again, but the answer refers to AllertSite, which is not considered to be used during testphase of a developed microservice. I have tests defined in SoapUI, which must verify a given ssl-certificate. It is simply testable by using other tools, like curl, which rejects the request on default security level. But I have written my testcases in SoapUI and thought it would just have the abiltiy to verify untrusted ssl certificates.&nbsp;Regards,&nbsp;TM

nmrao · Answer

Sorry about it. Should have checked before sending info.In the preferences, there is File &gt; Preferences &gt; SSL  Settings &gt; Client Authentication check box, may be try checking with that.

Forum Discussion

SSL Certificate verification missing

10 Replies

Related Content

Server SSL Certificate verification failed, issues is not trusted

How can disable SSL certification verification in SoapUI?

Missing File

Missing header

testcomplete certification

Recent Discussions

SOAP Request works in SoapUI, but not in C# code

How to configure Swagger in Paas to use it in Oracle APEX instance.

log4j1.x vulnerability

Soapui 5.7.1 dependency : thoughtworks:xstream:jar:1.4.20

SoapUI OSS apidocs are outdated in April 2024