Ignoring Client side Lisa certificate; Resolved Certificate Error: CN: Lisa is not authorized for userid for sites that don't require certificate

Products

• Service Virtualization

Issue/Introduction

When sending a soap request(https://fserverhost.com/rsax) to the direct endpoint from local machine using Postman , getting a  200 response( No certificate passed from local machine).

Then created a new test case in Devtest or do a VS recording with a soap request and try to send the same request ( no certificates passed)  , getting the following response

 

<?xml version="1.0" encoding="utf-8"?>

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">

  <soap:Body>

    <soap:Fault>

      <faultcode>soap:Client</faultcode>

      <faultstring>Access denied</faultstring>

      <detail>

        <code>6020910</code>

        <type>Error</type>

        <context>Certificate CN: Lisa is not authorized for usrd: N600, Full Certificate details: (Subject DN: [email protected], C=US, S=Texas, L=Dallas, O=Lisa, OU=Lisa, CN=Lisa, Issuer DN: [email protected], C=US, S=Texas, L=Dallas, O=Lisa, OU=Lisa, CN=Lisa)</context>

      </detail>

    </soap:Fault>

  </soap:Body>

</soap:Envelope>

 

 

Looks like Lisa tool is adding a certificate by default.  This is happening for Live Invocation too. 

Environment

Release : 10.7

Component : DevTest Virtual Service Environment

Cause

N/A

Resolution

SSL Recording Improvement: When recording a virtual service via the HTTP Recorder in the workstation, choosing “Use SSL to Server” allows you to ignore the client side certificate when recording a virtual service.

We have a patch that handles VS recording and LIVE INVOCATION use case without using a client certificate. 

Open a support ticket and ask for  patch_DE526893_10.7.0_LTD.jar

Additional Information

Steps to apply:

1. Exit Workstation and stop all Devtest services running on the machine

2.Copy patch "patch_DE526893_10.7.0_LTD.jar" to LISA_HOME/lib/patches folder

3.. Start Devtest services that were stopped on step 1, launch workstation too

4. With this patch in place, there is no need to comment out ssl.client.cert.path and ssl.client.cert.pass properties lisa.properties 

5. With this patch in place, a new option NONE has been added to the 'SSL Keystore file'. You can choose this option when you dont want to pass a CLIENT keystore while using SSL to Server