title: CXF with 2-Way-SSL: How to exclude generated WSDL from client authentication requirement?
body: <p>after a lot of work I finally got a Two-Way-SSL WebService (Client &amp; Server authentication) running on an OSGi (karaf 3.0.3) runtime environment via apache cxf. </p>
  
  <p>It works very well but the generated WSDL underlies the same security mechanism. Meaning that I cannot receive the generated WSDL via browser or soapUI.</p>
  
  <p>Is there a way to exclude the WSDL from the client authentication? </p>
  
  <p>Here is my blueprint.xml: </p>
  
  <pre class="lang-xml prettyprint-override"><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0"
      xmlns:jaxws="http://cxf.apache.org/blueprint/jaxws" xmlns:httpj="http://cxf.apache.org/transports/http-jetty/configuration"
      xmlns:sec="http://cxf.apache.org/configuration/security" xmlns:cxf="http://cxf.apache.org/blueprint/core"&gt;
  
      &lt;jaxws:endpoint id="someWS"
          implementor="#someWebService" address="https://localhost:9443/services/someWS" /&gt;
  
      &lt;httpj:engine-factory bus="cxf"&gt;
          &lt;httpj:engine port="9443"&gt;
              &lt;httpj:tlsServerParameters&gt;
                  &lt;sec:cipherSuitesFilter&gt;
                      &lt;sec:include&gt;.*_WITH_3DES_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_WITH_AES_128_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_WITH_AES_256_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_EXPORT_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_EXPORT1024_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_WITH_DES_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_WITH_AES_.*&lt;/sec:include&gt;
                      &lt;sec:include&gt;.*_WITH_NULL_.*&lt;/sec:include&gt;
                      &lt;sec:exclude&gt;.*_DH_anon_.*&lt;/sec:exclude&gt;
                  &lt;/sec:cipherSuitesFilter&gt;
              &lt;/httpj:tlsServerParameters&gt;
              &lt;httpj:threadingParameters minThreads="5"
                  maxThreads="15" /&gt;
              &lt;httpj:connector&gt;
                  &lt;bean class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector"&gt;
                      &lt;argument&gt;
                          &lt;bean class="org.eclipse.jetty.util.ssl.SslContextFactory"&gt;
                              &lt;property name="keyStore" value="etc/keystores/specificWS.jks" /&gt;
                              &lt;property name="keyStorePassword" value="..." /&gt;
                              &lt;property name="keyManagerPassword" value="..." /&gt;
                              &lt;property name="trustStore" value="etc/keystores/specificWS.jks" /&gt;
                              &lt;property name="trustStorePassword" value="..." /&gt;
                              &lt;property name="needClientAuth" value="true" /&gt;
                          &lt;/bean&gt;
                      &lt;/argument&gt;
                      &lt;property name="port" value="9443" /&gt;
                      &lt;property name="acceptors" value="4" /&gt;
                  &lt;/bean&gt;
              &lt;/httpj:connector&gt;
          &lt;/httpj:engine&gt;
      &lt;/httpj:engine-factory&gt;
  &lt;/blueprint&gt;
  </code></pre>
  
  <p>Many thanks in advance. </p>