Thanks for the help.
I found the problem, i was using WSS4JInterceptor with action unsigned saml
token and timestamp 
<bean class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
<constructor-arg>
        <map>
                <entry key="action" value="SAMLTokenUnsigned Timestamp" />
        </map>
</constructor-arg>
</bean>

I replace the WSS4JInInterceptor by
org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JInInterceptor and it works
fine now.

Btw, we configured apache with following options in order it forward cipher
suite and client certs:

SSLOptions +ExportCertData
SSLOptions +StdEnvVars

--
View this message in context: 
http://cxf.547215.n5.nabble.com/WSS-Policy-sender-vouches-over-ssl-with-apache-server-tp5681761p5683071.html
Sent from the cxf-user mailing list archive at Nabble.com.

Reply via email to