soapui 证书_SoapUI无法连接HTTPS(SSLPeerUnverifiedException)

Leos Literak

7

java

ssl

soapui

我需要测试部署到HTTPS端点上部署的预发布环境的Web服务.不幸的是,SoapUI失败了SSLPeerUnverifiedException: peer not authenticated.我使用了4.6.4和非常新的5.0版本.

ENV:

端点是https,startcom证书,网络使用代理(但相同的问题,没有代理与不同的网络)

我通过firefox提取了端点证书并让它信任.所以我cacerts从soapui JVM安装修改:

..\SoapUI-4.6.4\jre\lib\security>keytool -import -alias HOSTNAME

-file endpoint.crt -keystore cacerts -storepass changeit

重新启动然后重新测试 - 失败.

然后我采取了不同的方法,让SoapUI JVM信任所有StartCom证书.

keytool -import -trustcacerts -alias startcom.ca -file ca.crt -keystore cacerts

keytool -import -alias startcom.ca.sub -file sub.class1.server.ca.crt -keystore cacerts

重新启动并再次失败.我现在还能做什么？

编辑

2014-05-30 08:39:53,782 ERROR [errorlog] javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

at sun.security.ssl.SSLSessionImpl.getPeerCertificates(Unknown Source)

at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)

at org.apache.http.conn.ssl.SSLSocketFactory.createLayeredSocket(SSLSocketFactory.java:446)

at org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:499)

at com.eviware.soapui.impl.wsdl.support.http.SoapUISSLSocketFactory.createLayeredSocket(SoapUISSLSocketFactory.java:268)

at org.apache.http.impl.conn.DefaultClientConnectionOperator.updateSecureConnection(DefaultClientConnectionOperator.java:200)

at org.apache.http.impl.conn.AbstractPoolEntry.layerProtocol(AbstractPoolEntry.java:277)

at org.apache.http.impl.conn.AbstractPooledConnAdapter.layerProtocol(AbstractPooledConnAdapter.java:142)

at org.apache.http.impl.client.DefaultRequestDirector.establishRoute(DefaultRequestDirector.java:758)

at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:565)

at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415)

at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:820)

at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:754)

at com.eviware.soapui.impl.wsdl.support.http.HttpClientSupport$Helper.execute(HttpClientSupport.java:238)

at com.eviware.soapui.impl.wsdl.support.http.HttpClientSupport.execute(HttpClientSupport.java:348)

at com.eviware.soapui.impl.wsdl.submit.transports.http.HttpClientRequestTransport.submitRequest(HttpClientRequestTransport.java:318)

at com.eviware.soapui.impl.wsdl.submit.transports.http.HttpClientRequestTransport.sendRequest(HttpClientRequestTransport.java:232)

at com.eviware.soapui.impl.wsdl.WsdlSubmit.run(WsdlSubmit.java:123)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

SSL调试:

adding as trusted cert:

Subject: CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Issuer: CN=StartCom Certification Authority, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Algorithm: RSA; Serial number: 0x1

Valid from Sun Sep 17 21:46:36 CEST 2006 until Wed Sep 17 21:46:36 CEST 2036

Allow unsafe renegotiation: false

Allow legacy hello messages: true

Is initial handshake: true

Is secure renegotiation: false

Thread-20, WRITE: TLSv1 Handshake, length = 186

Thread-20, READ: TLSv1 Alert, length = 2

Thread-20, RECV TLSv1 ALERT: warning, unrecognized_name

SSL - handshake alert: unrecognized_name

Thread-20, handling exception: javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name

Thread-20, SEND TLSv1 ALERT: fatal, description = unexpected_message

Thread-20, WRITE: TLSv1 Alert, length = 2

Thread-20, called closeSocket()

Thread-20, IOException in getSession(): javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name

09:16:12,482 ERROR [WsdlSubmit] Exception in request: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated