Forum Discussion

left-o-rama's avatar
left-o-rama
New Contributor
5 years ago

SoapUI 5.4.0 TLSv1.2

I need to force SoapUI to use TLS 1.2. For some reason, it is continuing to try and negotiate TLS 1 when it attempts to connect to an LDAP server.

 

Is initial handshake: true

Is initial handshake: true
Ignoring unsupported cipher suite: SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_ECDH_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_DHE_RSA_WITH_AES_128_CBC_SHA256
Ignoring unsupported cipher suite: SSL_DHE_DSS_WITH_AES_128_CBC_SHA256
%% No cached client session
*** ClientHello, TLSv1
RandomCookie:  GMT: 1539270212 bytes = { 190, 36, 155, 63, 249, 228, 34, 47, 110, 206, 253, 217, 59, 120, 159, 128, 17, 126, 243, 42, 33, 79, 54, 197, 9, 239, 67, 24 }
Session ID:  {}
Cipher Suites: [TLS_EMPTY_RENEGOTIATION_INFO_SCSV, SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_AES_128_CBC_SHA, SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA, SSL_ECDH_RSA_WITH_AES_128_CBC_SHA, SSL_DHE_RSA_WITH_AES_128_CBC_SHA, SSL_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, SSL_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, SSL_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA]
Compression Methods:  { 0 }
Extension elliptic_curves, curve names: {secp256r1, secp192r1, secp224r1, secp384r1, secp521r1, secp160k1, secp160r1, secp160r2, secp192k1, secp224k1, secp256k1}
Extension ec_point_formats, formats: [uncompressed]
Extension server_name, server_name: [host_name:

 

Thread-19, handling exception: java.net.SocketException: Connection reset
AssemblyLines/XXX.WebServiceListener.0, handling exception: java.net.SocketException: Connection reset
AssemblyLines/XXX.WebServiceListener.0, handling exception: java.net.SocketException: Connection reset

 

Here is my vmoptions file:

-XX:MinHeapFreeRatio=20
-XX:MaxHeapFreeRatio=40
-Xms128m
-Xmx1000m
-Dsoapui.properties=soapui.properties
-Dsoapui.https.protocols=SSLv3,TLSv1.2
-Dsoapui.home=C:\Program Files\SmartBear\SoapUI-5.4.0/bin
-Dsoapui.ext.libraries=C:\Program Files\SmartBear\SoapUI-5.4.0/bin/ext
-Dsoapui.ext.listeners=C:\Program Files\SmartBear\SoapUI-5.4.0/bin/listeners
-Dsoapui.ext.actions=C:\Program Files\SmartBear\SoapUI-5.4.0/bin/actions
-Dwsi.dir=C:\Program Files\SmartBear\SoapUI-5.4.0/wsi-test-tools
-Djava.library.path=C:\Program Files\SmartBear\SoapUI-5.4.0/bin
-Djava.util.Arrays.useLegacyMergeSort=true
-splash:SoapUI-Spashscreen.png

 

I've tried with/without the SSLv3. Makes no difference.

 

I've seen numerous postings on this topic, but they all point to the change I made to the vmoptions file, which does not work for me in SoapUI 5.4.0.

Any advice would be appreciated.