ReadyAPI-3.3.1 log4j vulnerable?
Hello, I am wanting to know if the ReadyAPI-3.3.1 app is vulnerable to the log4j vulnerability? I see that it uses the log4j-core-2.11.jar file. C:\Program Files\SmartBear\ReadyAPI-3.3.1\lib\log4j-core-2.11.0.jar What remediation is required if so, is this resolved via a patch to a newer version? Thank you, MikeSolved3.9KViews0likes2Commentsencoding of utf-8 is set for some APIs test cases and not for some in project properties
Hi mates, I am sending unicode characters in Json request payload. The server is returning "NO success" response. But If I add encoding as UTF-8 in that test case(REST) properties, response comes as "SUCCESS". Is it the the right thing to send UTF-8 explicitly ? And if yes, how does this will be addressed when any integrations call that API ? And, I could see some other APIs test cases shows UTF-8 as encoding by default in ReadyAPI. So, not sure whats going on. Appreciate any help. Thanks. Ravi.2.1KViews0likes2Comments3.44 issue with java.net.SocketTimeoutException: Read timed out
test step is failing due to "java.net.SocketTimeoutException: Read timed out", we tried increasing the socket timeout but it is still failing after the default 1 minute time. this project and test step is working fine when using 3.41 readyapi version but same test is failing in 3.44 and the latest 3.45 versions. please let us know what need to be done here as this impacting our regression testsSolved1.4KViews1like2Commentssign and encrypt the request value?
Dear all I need to test a REST API via HTTPS, Between communication with server, certificate , encryption , decryption sometimes are necessary. There are several input values in a request, one of the requests should be signed with the private key. Another value should be encrypted with session key and the session key should be made by client. How could I handle this kind of request? Use Event Handler? Thanks kind regrads Prometheus How could I create a session key?Solved1.1KViews0likes2CommentsSecurity Tests within Docker
Hello, Is there a way to run Security Tests in a Docker container? We are currently running our SoapUI tests (ReadyAPI 2.7) in a Docker container as a part of our CI/CD pipeline, but cannot find an option to run the Security TestRunner within the container, since it appears to default to tesrunner.sh. Given the Security Tests are within a suite within the SoapUI Pro project, how might we include running these tests within the container? Thanks, GregSolved1.1KViews0likes1CommentReport generated via teardown script does not contain any data
We need to be able to execute a security test and then save both the Security Issues Report and the Security Test Report with a specific filename structure to a network share. The test runner only allows directly saving a single report per test run.Therefore we need to generate these reports via a teardown script. Thankfully, or so we thought, SmartBear kindly provided a template for this exact thing (https://support.smartbear.com/readyapi/faq/configuring-readyapi-to-save-project-or-testsuite/) Modifying the script to target theSecurityTestCaseReport instead of the WsdlTestSuiteReport got the two reports generating upon the test finishing. However upon reviewing the reports, the Security Test Report was only populated with the number of test steps, number of security scans and the Start and End times areWed Dec 31 17:00:00 MST 1969 (which just happens to be the timezone adjusted epoch start ofJanuary 1st, 1970 at 00:00:00 UTC) - See attached pdfs Seeing as the sample script is fairly recent from4/30/2021, I decided to put the script directly in a TestSuite teardown script thinking maybe it only works with functional tests. No same issue no data in the report. Again to try and isolate anything odd about my projects, I used theVirtualServices-readyapi-project from the tutorials folder. Doing some searching of the community pages here, this issue has come up a few times with either no answer or recommending that people use the test runner or pointing people back to the teardown script linked at the start (circular dependencies are great eh) Does this teardown script actually work? Is it possible to generate reports from a teardown script? Can someone correct the script so that it does work? Regards Steve All of this was runningReadyAPI version 3.41.1943Views0likes3CommentsSecurity Scan report not displaying URL or Environment
I have ReadyAPI setup using Environments and different URL's assigned to each environment. After running the Security Test, I click on the 'View Summary Report' and then on the 'View Full Report'. Neither report displays the Environment name or URL that I ran the test against. I've looked through the settings and can't seem to find a place to add it into the report. Is it possible to display the Environment or URL in the report?Solved824Views0likes1Comment