Kevin
Kevin

Reputation: 434

Consuming SOAP web service with Two-Way TLS in SOAP UI

Im consuming a SOAP web service which has two-way SSL enabled. So I provided the client cert ( public key) to the server and configured the private key in my SOAP UI client project. Im able to consume the web service. But what I do not understand is, shouldn't I confugure server's certificate ( that can be extacted using the endpoint through browser) explicitly in SOAP UI to enable two way SSL? or SOAPUI takes care of if automatically?

Upvotes: 0

Views: 328

Answers (1)

albciff
albciff

Reputation: 18507

Seems that in SOAP UI there is no SSL verification, since it's bypassing it by code. In the main class which starts the application, there is a call to SecureTools.setTrustSSL(); in main(args[]) method. If you check what SecureTools.setTrustSSL() method does, it modifies SSL default context factory with a trustManager which not does any check.

Upvotes: 1

Related Questions