Testing the Web Service secured by “Client Certificate” Authentication via SOAP UI.

Client Key generation and exporting the public certificate

1)  Generate the Self Sign certificate or get the certificate from some vendor. We will discuss the steps to generate the Self  Sign certificates

                   A)  Set the java class path to run the keytool

                   B)  Use the below to generate the keys

C:\ identity>keytool -genkey -alias tesclient -keyalg RSA -keystore  SSKeystore.jks Enter keystore password: XXXXX Re-enter new password: XXXXX What is your first and last name?   [Unknown]:  consumer What is the name of your organizational unit?   [Unknown]:  SOA What is the name of your organization?   [Unknown]:  MyCompany What is the name of your City or Locality?   [Unknown]:  Hillsborough What is the name of your State or Province?   [Unknown]:  NJ What is the two-letter country code for this unit?   [Unknown]:  US Is CN= consumer, OU=SOA, O= MyCompany, L= Hillsborough, ST=NJ, C=US correct?   [no]:  yes Enter key password for < tesclient >         (RETURN if same as keystore password):

2) Export the public certificate and give to the Service provider. Service provider should store this certificate in the trust.

C:\identity>keytool -export -alias tesclient  -file Client.crt -keystoe SSKeystore.jks Enter keystore password: Certificate stored in file <Client.crt>

Testing with SOAP UI

1) If you will try to print the WSDL of the secured web service from Browser you will get the “Error 401—Unauthorized”  as expected

2) If you try to add the WSDL from SOAP UI, you will get the error  in loading the WSDL as expected as this is secured by client authentication.

3) In SOAP UI , navigate to File->Preferences-> SSL Settings. Fill the below fields. Refer the link for more description.

http://www.soapui.org/Working-with-soapUI/preferences.html#SSL Settings Tab

Keystore	Set the path of your keystore C:\ identity\ SSKeystore.jks
Keystore Password	Enter the keystore password XXXXX
Client Authentication	Select

4) Now add the WSDL of the secured web service and test service. You will get the required output.