Should SOAPUI work with a server with an expired ssl certificate
First Post.. I'm a bit of a SOAPUI newbie.
We're testing an internal enterprise webservice. We have a general query regarding server certificates. We have generated a server side self-signed certificate that expires after a day. We haven't done anything with this server certificate as SOAPUI worked without us having to do anything.
After the certificate expiry we're still able to use SOAP UI to generate requests and get the correct server responses.
Our expectation was that the server would reject the requested because of the expired server certificate
Any help appreciated.
Re: Should SOAPUI work with a server with an expired ssl certificate
Presumably to make testing SSL secured web services a little easier for SoapUI, a customSSLSocketFactory (SoapUISSLSocketFactory) has been written to override the checkServerTrustedmethods to do nothing. This means that SoapUI will trust any SSL protected service without the need to import the service's SSL certificate into a SoapUI truststore.
For the full related post, please see https://community.smartbear.com/t5/SoapUI-Open-Source/why-no-specify-truststore-but-still-work-in-so...