HTTPS with & without client authentication allows http end point in SOAP UI

[ramu_g4]

Hi Experts,

Our scenario is SOAP to Proxy & in sender channel suppose if I use HTTPS with client authentication & HTTPS without client authentication security level in SOAP channel ideally it should not allow http://--- end point in SOAP UI as URL i.e., I mean it should allow only https://---- endpoint right?

Also  HTTPS without client authentication should work even without credentials in SOAP UI right? But currently in our system which dual 7.3 both of the above are not working as ideal i.e., http end point is allowed during HTTPS option in channel & without credentials HTTPS without client authentication is not working. Hence , please guide to achieve the same in our system.

Thanks,

Ramu G.

[former_member186851 · Accepted solution]

Ramu,

check the below discussion

[ramu_g4 · Accepted solution]

Hi Raghu,

Thanks I will check this.

-Ramu G.

[manoj_khavatkopp]

Ramu,

 HTTPS without client authentication should work even without credentials in SOAP UI right? 

No, Http/Https with or without Client authentication always requires User ID and Password .in Simple words if you are interacting with Sender SOAP adapter Credentials are must because when you try to hit SOAP adapter authentication takes place at HTTP header, however there are few ways by which you can disable this , you will find lots of threads on this.

HTTPS without client authentication security level in SOAP channel ideally it should not allow http://---end point in SOAP UI

Yes, it should give a error(https schema missing or something like that ) when you use http URL when you have set option https with/without authentication in channel . Check the cache when you have selected https without client authentication and try to resend message with http url again.

Br,

Manoj

[ramu_g4]

Hi Manoj,

Cache is up to date. But still after sending message after enabling https with or without client authentication in channel & endpoint as http://---- is still allowed by channel & it is working which is not expected /ideal behaviour.

Thanks,

Ramu G.

[manoj_khavatkopp]

Is SSL enabeld for your PI system can you open your PI system homepage using https URL

[ramu_g4]

Hi Manoj,

You mean  https://<host>:<port>/dir/start/index.jsp should work right if SSL is enabled?

Thanks,

Ramu G.

[manoj_khavatkopp]

Yes.

And also chekc in NWA if below properties are set.

Bdw when you keep "Https with/wihout client authentication in Sender channel " and use http url to post in SOAP UI what repsone do you get its and empty soap envelope or blank ? do you see this message in Moni/RWB?

Br,

Manoj

[former_member182412]

Hi Ramu,

Check these blogs.

<I am deleting the link because Raghu already provided>

Regards,

Praveen.

[ramu_g4]

Dear Praveen,

Thanks for your reply! I will check this.

-Ramu G.