Thanks guys but I am still confused. In my code:
((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.ENCRYPT_PROPERTIES, "client_sign.properties"); ((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.ENCRYPT_USERNAME, "signingonly"); ((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.SIGNATURE_PROPERTIES, "client_sign.properties"); ((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.SIGNATURE_USERNAME, "signingonly"); ((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.CALLBACK_HANDLER, ClientCallbackHandler.class.getName()); I assume somewhere I need to add a SecurityConstants.SOMETHING_REFERS_TRUSTCONFIG_FILE ? Cheers AG -- Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html