Reputation: 434
Im consuming a SOAP web service which has two-way SSL enabled. So I provided the client cert ( public key) to the server and configured the private key in my SOAP UI client project. Im able to consume the web service. But what I do not understand is, shouldn't I confugure server's certificate ( that can be extacted using the endpoint through browser) explicitly in SOAP UI to enable two way SSL? or SOAPUI takes care of if automatically?
Upvotes: 0
Views: 328
Reputation: 18507
Seems that in SOAP UI there is no SSL verification, since it's bypassing it by code. In the main class which starts the application, there is a call to SecureTools.setTrustSSL();
in main(args[])
method. If you check what SecureTools.setTrustSSL()
method does, it modifies SSL default context factory with a trustManager which not does any check.
Upvotes: 1