In the stacktrace above, please notice there is a WARNING (which may not be that important) and an ERROR:
WARN [org.apache.cxf.transport.https.SSLUtils] - <Default key managers cannot be initialized: Password must not be null> java.security.UnrecoverableKeyException: Password must not be null and ERROR [org.apache.cxf.sts.operation.TokenIssueOperation] - <Cannot issue token: Cannot create Crypto class org.apache.ws.security.components.crypto.Merlin> org.apache.cxf.ws.security.sts.provider.STSException: Cannot create Crypto class org.apache.ws.security.components.crypto.Merlin -- Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html