SOAP service testing - Revision history

Paavo at 12:13, 6 December 2016

2016-12-06T12:13:29Z

← Older revision		Revision as of 15:13, 6 December 2016
Line 3:		Line 3:
	\|}		\|}

	~~Krediidiinfo~~ AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other ~~Krediidiinfo~~ AS SOAP services can also be tested in the same way.		Creditinfo Eesti AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other Creditinfo Eesti AS SOAP services can also be tested in the same way.

	Authentication is possible using the certificate/key pair as well as the HTTP Basic Authentication user name and password. In addition to the password or certificate, the user needs to have been issued a permission to use the [[KiCompany_en \| KiCompany]] service by ~~Krediidiinfo~~ AS customer service.		Authentication is possible using the certificate/key pair as well as the HTTP Basic Authentication user name and password. In addition to the password or certificate, the user needs to have been issued a permission to use the [[KiCompany_en \| KiCompany]] service by Creditinfo Eesti AS customer service.

	If the following tests in the client's environment are successful, it can be stated that the certificate or password issued to the client is valid, and the permissions to use [[KiCompany_en \| KiCompany]] are correctly set.		If the following tests in the client's environment are successful, it can be stated that the certificate or password issued to the client is valid, and the permissions to use [[KiCompany_en \| KiCompany]] are correctly set.
Line 12:		Line 12:
	== Network test ==		== Network test ==

	The request's source environment must be able to connect to the <tt>services.krediidiinfo.ee</tt> server using the tcp port number <tt>443</tt>. ~~Krediidiinfo~~ AS has not set any IP-based limitations to that server.		The request's source environment must be able to connect to the <tt>services.krediidiinfo.ee</tt> server using the tcp port number <tt>443</tt>. Creditinfo Eesti AS has not set any IP-based limitations to that server.

	The <tt>netcat</tt> utility can be used in order to test whether there is a firewall blocking the connection:		The <tt>netcat</tt> utility can be used in order to test whether there is a firewall blocking the connection:
Line 50:		Line 50:
	== Using curl==		== Using curl==

	The command-line tool <tt>curl</tt> is a convenient testing utility. To use the ~~Krediidiinfo~~ AS SOAP service, <tt>curl</tt> must be compiled with SSL support and must support https protocol. You can check whether this is the case by using the command <tt>curl --version</tt>; the result:		The command-line tool <tt>curl</tt> is a convenient testing utility. To use the Creditinfo Eesti AS SOAP service, <tt>curl</tt> must be compiled with SSL support and must support https protocol. You can check whether this is the case by using the command <tt>curl --version</tt>; the result:

	curl 7.19.6 (x86_64-redhat-linux-gnu) libcurl/7.19.6 NSS/3.12.4.1 Beta zlib/1.2.3 libidn/0.6.14 libssh2/0.18		curl 7.19.6 (x86_64-redhat-linux-gnu) libcurl/7.19.6 NSS/3.12.4.1 Beta zlib/1.2.3 libidn/0.6.14 libssh2/0.18
Line 58:		Line 58:
	=== curl SOAP request, using HTTP Basic Authentication ===		=== curl SOAP request, using HTTP Basic Authentication ===

	~~Krediidiinfo~~ AS has issued you a user name and password. In this example, the user name is "1234" and password is "abc123".		Creditinfo Eesti AS has issued you a user name and password. In this example, the user name is "1234" and password is "abc123".

	curl -d @data.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>		curl -d @data.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
Line 69:		Line 69:
	=== curl SOAP request, using a certificate and a key as the authentication method ===		=== curl SOAP request, using a certificate and a key as the authentication method ===

	To make a request you need a certificate file issued by ~~Krediidiinfo~~ AS in the PEM format. In this example the file is named <tt>cert.pem</tt>. It looks like this:		To make a request you need a certificate file issued by Creditinfo Eesti AS in the PEM format. In this example the file is named <tt>cert.pem</tt>. It looks like this:
	<pre>		<pre>
	-----BEGIN CERTIFICATE-----		-----BEGIN CERTIFICATE-----
Line 173:		Line 173:
	curl -d @data.txt -u 1234:abZZ23 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>		curl -d @data.txt -u 1234:abZZ23 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
	<pre>		<pre>
	Authentication of ~~Krediidiinfo~~ web service user failed! For assistance, please contact ~~Krediidiinfo~~ by calling (+372) 6659600.		Authentication of Creditinfo web service user failed! For assistance, please contact Creditinfo by calling (+372) 6659600.
	</pre>		</pre>

Kart at 08:42, 13 June 2013

2013-06-13T08:42:06Z

← Older revision		Revision as of 11:42, 13 June 2013
Line 1:		Line 1:
			{\| align="right"
			\| [[Image:Flag of Estonia.svg\|border\|30px]] [[SOAP_teenuse_testimine\|eesti keeles]]
			\|}

	Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other Krediidiinfo AS SOAP services can also be tested in the same way.		Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other Krediidiinfo AS SOAP services can also be tested in the same way.

Kart at 10:11, 15 June 2012

2012-06-15T10:11:53Z

Show changes

Kart at 10:00, 15 June 2012

2012-06-15T10:00:30Z

← Older revision		Revision as of 13:00, 15 June 2012
Line 1:		Line 1:
	Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other Krediidiinfo AS SOAP services can also be tested in the same way.		Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en \| KiCompany]] service. Other Krediidiinfo AS SOAP services can also be tested in the same way.

	~~Autentimiseks saab kasutada sertifikaadi ja selle võtme paari kui ka http basic authentication kasutajat ning parooli~~. ~~Peale paroolide või sertifikaadi olemasolu~~, ~~peab Krediidiinfo AS kliendihaldus olema andnud õiguse kasutada~~ [[KiCompany]] ~~teenust~~.		Authentication is possible using the certificate/key pair as well as the HTTP Basic Authentication user name and password. In addition to the password or certificate, the user needs to have been issued a permission to use the [[KiCompany_en \| KiCompany]] service by Krediidiinfo AS customer service.

	~~Kui järgnevad testid kliendi keskkonnas õnnestuvad~~, ~~saab väita~~, ~~et kliendile väljastatud sertifikaat või parool on õige ning õigused~~ [[KiCompany]] ~~kasutamiseks paigas~~.		If the following tests in the client's environment are successful, it can be stated that the certificate or password issued to the client is valid, and the permissions to use [[KiCompany_en \| KiCompany]] are correctly set.

Kart: Created page with "Krediidiinfo AS SOAP service is tested using `curl` software and the KiCompany service. Other Krediidiinfo AS SOAP services can also be tested in the..."

2012-06-15T09:59:18Z

Created page with "Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the KiCompany service. Other Krediidiinfo AS SOAP services can also be tested in the..."

New page

Krediidiinfo AS SOAP service is tested using <tt>curl</tt> software and the [[KiCompany_en | KiCompany]] service. Other Krediidiinfo AS SOAP services can also be tested in the same way.

Autentimiseks saab kasutada sertifikaadi ja selle võtme paari kui ka http basic authentication kasutajat ning parooli. Peale paroolide või sertifikaadi olemasolu, peab Krediidiinfo AS kliendihaldus olema andnud õiguse kasutada [[KiCompany]] teenust.

Kui järgnevad testid kliendi keskkonnas õnnestuvad, saab väita, et kliendile väljastatud sertifikaat või parool on õige ning õigused [[KiCompany]] kasutamiseks paigas.

== Võrgu test ==

Keskkond, millest päring tehakse, peab saama ühenduda <tt>services.krediidiinfo.ee</tt> serverisse tcp porti <tt>443</tt>. Krediidiinfo AS poolt ei ole IP põhiseid piiranguid sellele serverile.

Testimaks, ega mõni tulemüür vahele ei sega võib kasutada programmi <tt>netcat</tt>:
nc -z -vv services.krediidiinfo.ee 443
Mõnes operatsioonisüsteemis on binaari nimi teine:
netcat -z -vv services.krediidiinfo.ee 443

Positiivne tulemus on:
Connection to services.krediidiinfo.ee 443 port [tcp/https] succeeded!

Näited negatiivsetest tulemustest on:
nc: connect to services.krediidiinfo.ee port 443 (tcp) failed: Connection refused

nc: connect to services.krediidiinfo.ee port 443 (tcp) failed: Connection timed out

Samuti peaks olema võimalik ühenduda sama serveri tcp porti <tt>80</tt>, kust leiab [http://www.w3.org/TR/wsdl wsdl] failid ning sellesama wiki. Kui test ei õnnestu, tuleks pöörduda oma võrguadministraatori poole.

== SOAP päringu näide ==

Esiteks peab teadma, mis teenuse pihta päring teha. Antud näites kasutame [[KiCompany]] teenust, seega päringu URI on <tt>https://services.krediidiinfo.ee/soap.php?name=KiCompany</tt>.

Teiseks on vaja SOAP päringut ennast, hoiame seda teksifailis nimega <tt>data.txt</tt>, faili sisu järgnev:
<pre>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<SOAP-ENV:Body>
<m:findCompanies xmlns:m="urn:KiCompany" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<name xsi:type="xsd:string">kredi</name>
<count xsi:type="xsd:int">2</count>
</m:findCompanies>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>

Antud päring otsib firmasid, mis algavad stringiga <tt>kredi</tt> ning ei kuva rohkem kui kaks esimest vastust. (Päring on tasuline!)

== curl kasutamine ==

Testimiseks on mugav kasutada käsurea programmi <tt>curl</tt>. Krediidiinfo AS SOAP teenuse kasutamiseks peab <tt>curl</tt> olema kompileeritud SSL toega ning oskama https protokolli. Veenduge selles käsuga <tt>curl --version</tt>, tulemus:

curl 7.19.6 (x86_64-redhat-linux-gnu) libcurl/7.19.6 NSS/3.12.4.1 Beta zlib/1.2.3 libidn/0.6.14 libssh2/0.18
Protocols: tftp ftp telnet dict ldap ldaps http file '''https''' ftps scp sftp
Features: GSS-Negotiate IDN IPv6 Largefile '''SSL''' libz

=== curl SOAP päring kasutades autentimiseks HTTP Basic Authentication'it ===

Krediidiinfo AS poolt on teile väljastatud kasutajanimi ja parool, siin näites olgu kasutajanimi "1234" ning parool "abc123".

curl -d @data.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>

-d määrab päringu. @ märk failinime ees ütleb curl'ile, et tegemist on päringufaili, mitte päringu endaga.

-u määrab kasutaja ja parooli, mis on eraldatud kooloniga.

=== curl SOAP päring kasutades autentimiseks sertifikaati ja võtit ===

Päringu tegemiseks on esiteks vaja Krediidiinfo AS poolt väljasatud sertifikaadi faili PEM formaadis, antud näites on failinimeks <tt>cert.pem</tt>. Välja näeb umbes selline:
<pre>
-----BEGIN CERTIFICATE-----
MIIEPpuguyIHJPOHuiGIOGilUYGOIGIYFGuyFUassafDFSDFpuASDaaGA1UEBhMC
RUUxETAPiugUIOuphLBLUpuGIUIGigIPUbhpuiGIPYBuYBUKBLJYHFGuohGDVQQK
Ew9LcmVkaWlkaWluZm8gQVMxCzAJBgNVBAsTAklUMSEwHwYDVQQDExhzZXJ2aWNl
cy5rcmhlkjghGHGuZm8uZWUxITAfBgkqhkiG9w0BCQEWEml0QGtyZWRpaWRpaW5m
by5lZTAeFw0wOTglgkGIOUGpguPIUgvIpiughphPhOPOUhpBHIUGMQswCQYDVQQG
EwJFRTEQMA4GA1UECBMHRXN0b25pYTEQMA4GA1UEBxMHVGFsbGlubjEYMBYGA1UE
VMtxvrdTVDhtRBDJrdYRBDRVBDTJrbDJBYYJRdYrdjbyRBUYRdBYJRdRRbUJrRYJ
MTCMjfgukfgKGYGOYOUYGOygouYalsuUUGS4OCtgtrmzLw==
-----END CERTIFICATE-----
</pre>

Teiseks sertifikaadi võtme faili PEM formaadis, siin failinimeks <tt>key.pem</tt>. See fail on salajane ning kindlasti emaili teel või muul krüptimata viisil mitte vahendada!

Samas võib selle faili sisu otsa liita <tt>cert.pem</tt> failile <tt>(cat key.pem >> cert.pem)</tt>, siis ei pea võtmefaili <tt>curl</tt>'le eraldi ette näitama. Paljud programmid nõuavad just kokku liidetud varianti. Näeb umbes selline välja, DSA variandi puhul on natuke rohkem erinevusi:
<pre>
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,C1AA09832249D61D
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-----END RSA PRIVATE KEY-----
</pre>

Peab teadma ka sertifikaadi võtme parooli, kui võti on krüpteeritud. Antud näites olgu parool <tt>abcd1234</tt>.

Päringu teostamine:

curl -d @data.txt -cert $PWD/cert.pem:abcd1234 --key $PWD/key.pem <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>

-d võti määrab päringu, @ failinime ees ütleb curl'ile, et tegemist on päringufaili, mitte päringu endaga.

--cert võti määrab sertifikaadi faili asukoha. Tuleb kasutada "absolute path"-i. curl ei otsi faili antud kataloogist, seetõttu ka <tt>$PWD</tt> antud näites.
Kui võti on krüpteeritud, saab parooli määrata serdifikaadi failinime taga, eraldades selle failinimest kooloniga.

--key määrab võtmefaili asukoha. Kui sertifikaat ja võtmefail on üheks liidetud, siis seda ei ole vaja määrata.
Seetõttu määrataksegi võtme parool --cert juures, mitte siin.

== SOAP päringu tulemused ==

=== Õnnestunud päring ===

Õnnestunud tulemus (lisatud reavahetused loetavuse parandamiseks):
<pre>
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="urn:KiCompany"
xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<SOAP-ENV:Body>
<ns1:findCompaniesResponse>
<companies SOAP-ENC:arrayType="ns1:CompanyIDData[2]" xsi:type="ns1:CompanyIDDataArray">
<item xsi:type="ns1:CompanyIDData">
<regCode xsi:type="ns1:regCode">11517686</regCode>
<name xsi:type="xsd:string">KREDICO OÜ</name>
</item>
<item xsi:type="ns1:CompanyIDData">
<regCode xsi:type="ns1:regCode">90006012</regCode>
<name xsi:type="xsd:string">KREDIIDI JA EKSPORDI GARANTEERIMISE SITHASUTUS KREDEX</name>
</item>
</companies>
</ns1:findCompaniesResponse>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>

=== Vigased päringud ===

Viga GET parameetris (KiCompany asemel KiCompan):
curl -d @data.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompan</nowiki>
<pre>
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Server</faultcode>
<faultstring>Incorrect HTTP GET parameter 'name' value!</faultstring>
<faultactor></faultactor>
<detail>
<errorcode>-20002</errorcode>
<line_no>157</line_no>
</detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>

Vigane kasutaja või parool või sertifikaat:
curl -d @data.txt -u 1234:abZZ23 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
<pre>
Krediidiinfo veebiteenuse kasutaja autentimine ebaõnnestus! Abi saamiseks võtke ühendust Krediidiinfoga telefonil (+372) 6659600.
</pre>

Kasutajal ei ole õigust [[KiCompany]] kasutamiseks, pöörduge kliendihalduse poole:
curl -d @data.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
<pre>
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Server</faultcode>
<faultstring>Access denied for KiCompany!</faultstring>
<faultactor></faultactor>
<detail>
<errorcode>-20003</errorcode>
<line_no>106</line_no></detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>

SOAP päring puudub:
curl -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
<pre>

</pre>
(tulemust pole)

SOAP päringus endas on viga:
curl -d @vigane.txt -u 1234:abc123 <nowiki>https://services.krediidiinfo.ee/soap.php?name=KiCompany</nowiki>
<pre>
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Client</faultcode>
<faultstring>Bad Request</faultstring>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>
või
<pre>
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:VersionMismatch</faultcode>
<faultstring>Wrong Version</faultstring>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
</pre>

SOAP service testing - Revision history

Paavo at 12:13, 6 December 2016

Kart at 08:42, 13 June 2013

Kart at 10:11, 15 June 2012

Kart at 10:00, 15 June 2012

Kart: Created page with "Krediidiinfo AS SOAP service is tested using curl software and the KiCompany service. Other Krediidiinfo AS SOAP services can also be tested in the..."

Kart: Created page with "Krediidiinfo AS SOAP service is tested using `curl` software and the KiCompany service. Other Krediidiinfo AS SOAP services can also be tested in the..."