Home
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Using an external client
You can manually explore RESTful or other non-SOAP web services - or SOAP services that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
SSL with SoapUI
To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.

Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
- Using a browser
  For web applications, you can usually use the build-in Chromium browser for manual exploring. Where necessary the built-in IE vbrowser, or an external browser can be used.
- Using an external client
  You can manually explore RESTful or other non-SOAP web services - or SOAP services that do not require security envelopes - using a mobile phone, simulator, or emulator. AppScan displays the domains and requests in its External Traffic Recorder, and create appropriate tests from the input.
  - Recording with an external client
    Describes recording Manual Explore data with Postman, SoapUI, or another external client.
  - External Traffic Recorder
    When you manually explore using AppScan as recording proxy, this recorder displays domains detected and traffic received, and enables you to control which of these will be tested. A limited version of the recorder is used to record the login sequence.
  - SSL with SoapUI
    To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.
  - SSL with other external client
    To use SSL when recording from an external client, you must first install the AppScan SSL certificate on the AppScan machine. If the client is on a different machine to AppScan, you must also install the certificate on the client machine.

SSL with SoapUI

To use SoapUI with SSL you must first install the AppScan SSL certificate in SoapUI.

Procedure

Close any open instance of SoapUI.
In AppScan, click Tools > Options > Recording Proxy > Export, and save the ZIP file to your machine.

Note: If the Export button is disabled, the certificate is not installed, and you must first install it by clicking the Add button located above it.
Extract the SSL certificate file appScanRootCert.crt and save it to:
```
[SoapUI home dir]\jre\lib\security
```
Important: Do not change the filename. If the file already exists, overwrite it.
Open the command line as administrator, and go to:
```
cd [SoapUI home dir]\jre\lib\security
```

Run command:

"[SoapUI home dir]\jre\bin\keytool" -import -trustcacerts -keystore cacerts -storepass 
changeit -noprompt -alias AppScanCertificate -file appScanRootCert.crt

The certificate has now been added to the SoapUI key store, and will allow you to use SSL in SoapUI.

What to do next

Troubleshooting

If you are still unable to send requests, try these troubleshooting steps:

Close any open instance of SoapUI.
Uninstall the AppScan SSL Certificate by clicking Tools > Options > Recording Proxy tab > Remove.

Delete the AppScan KeyStore entry in SoapUI by running:

"[SoapUI home dir]\jre\bin\keytool" -delete -alias AppScanCertificate -storetype JKS 
-keystore cacerts -storepass changeit

Note: Ignore the warning that appears.

Repeat Steps 2 - 5 in the section above.

Related topic:

External traffic recorder not recording