Now I know why I got this error. The application is not taking in account of
the trust/keystores configured in the cxf.xml.
from ssl trace i see

keyStore is : 
keyStore type is : jks
keyStore provider is : 
init keystore
init keymanager of type SunX509
trustStore is: C:\Program Files\Java\jre6\lib\security\cacerts
trustStore type is : jks
trustStore provider is : 
init truststore


while  in my cxf.xml I have


<http:conduit name="*.http-conduit">

                <http:tlsClientParameters>

                        <sec:trustManagers>
                                <sec:keyStore type="JKS" password="password"
file="C:/certs/client-truststire.jks" />
                        </sec:trustManagers>


                        <sec:keyManagers keyPassword="password">
                                <sec:keyStore type="JKS" password="password"
file="C:/certs/client-keystore.jks" />
                        </sec:keyManagers>



                        <sec:cipherSuitesFilter>
                                <sec:include>.*_WITH_3DES_.*</sec:include>
                                <sec:include>.*_WITH_DES_.*</sec:include>
                                <sec:exclude>.*_WITH_NULL_.*</sec:exclude>
                                <sec:exclude>.*_DH_anon_.*</sec:exclude>
                        </sec:cipherSuitesFilter>

                </http:tlsClientParameters>

        </http:conduit>
    





--
View this message in context: 
http://cxf.547215.n5.nabble.com/Mutual-authentication-fails-using-cxf-tp5718353p5718381.html
Sent from the cxf-user mailing list archive at Nabble.com.

Reply via email to