SoapUI https handshake_failure


Windows 7

SoapUI 3.6

Tomcat 7


When use SoapUI to call https web service, an exception “ Received fatal alert: handshake_failure” occurs.

Solution 1

Step 1. Add “” to soapui.bat to check the detail log.

Step 2. The console shows:

pool-1-thread-5, WRITE: TLSv1 Handshake, length = 213
pool-1-thread-5, WRITE: SSLv2 client hello message, length = 227
pool-1-thread-5, READ: TLSv1 Alert, length = 2
pool-1-thread-5, RECV TLSv1 ALERT:  fatal, handshake_failure
pool-1-thread-5, called closeSocket()
pool-1-thread-5, handling exception: Received fatal alert: handshake_failure

At first, I tried to add more java options to SoapUI (ex.soapUI-Pro-3.6.vmoptions), such as “-Dsoapui.https.ciphers=…”, “-Dsoapui.https.protocols=…”, “”, but no luck.

Finally, I decided to modify the config of Tomcat. I added “sslEnabledProtocols” to server.xml and re-run SoapUI, it works.

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
  maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
  clientAuth="false" sslProtocol="TLS"

Solution 2 (For SoapUI 3.6)

Step 1. Add JAVA_OPTS to soapui-pro.bat (Optional)

set JAVA_OPTS=%JAVA_OPTS% -Dsoapui.https.protocols="SSLv3,TLSv1.2"

Step 2. Rename folder from “soapUI-Pro-3.6\jre” to “soapUI-Pro-3.6\jre.ignore” (SoapUI will find Java bundle elsewhere, ex. %Path%. My environment is JDK1.8.0_121. The default JRE of SoapUI 3.6 is too old. It does not support TLSv1.2. SoapUI 3.6 內建的Java版本太舊,無法支援TLSv1.2.)

Step 3. Start SoapUI by soapui-pro.bat (You can create a desktop shortcut). Done.


SoapUI 4.5.1 works fine even Tomcat has no “sslEnabledProtocols” attribute. I think there are some implementation differences between SoapUI 3.6 and SoapUI 4.5.1?

Well, it’s all about JDK version.



Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s