Consuming SOAP web service with Two-Way TLS in SOAP UI

249 views Asked by At

Im consuming a SOAP web service which has two-way SSL enabled. So I provided the client cert ( public key) to the server and configured the private key in my SOAP UI client project. Im able to consume the web service. But what I do not understand is, shouldn't I confugure server's certificate ( that can be extacted using the endpoint through browser) explicitly in SOAP UI to enable two way SSL? or SOAPUI takes care of if automatically?

1

There are 1 answers

2
albciff On

Seems that in SOAP UI there is no SSL verification, since it's bypassing it by code. In the main class which starts the application, there is a call to SecureTools.setTrustSSL(); in main(args[]) method. If you check what SecureTools.setTrustSSL() method does, it modifies SSL default context factory with a trustManager which not does any check.