Thanks for the help.
I found the problem, i was using WSS4JInterceptor with action unsigned saml
token and timestamp
<bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
<constructor-arg>
<map>
<entry key="action" value="SAMLTokenUnsigned Timestamp" />
</map>
</constructor-arg>
</bean>
I replace the WSS4JInInterceptor by
org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JInInterceptor and it works
fine now.
Btw, we configured apache with following options in order it forward cipher
suite and client certs:
SSLOptions +ExportCertData
SSLOptions +StdEnvVars
--
View this message in context:
http://cxf.547215.n5.nabble.com/WSS-Policy-sender-vouches-over-ssl-with-apache-server-tp5681761p5683071.html
Sent from the cxf-user mailing list archive at Nabble.com.