title: Weblogic kills CXF's SSL configuration?
body: <p>Good time!</p>
  
  <p>I've created a simple CXF client to communicate with a remote service protected by SSL. If I run a JUnit test a handshake performs without mistakes and the communication goes normally.</p>
  
  <pre><code>&lt;http:conduit name="&lt;service_namespace_port&gt;.http-conduit"&gt;
     &lt;http:client AutoRedirect="true" Connection="Keep-Alive"/&gt;
     &lt;http:tlsClientParameters secureSocketProtocol="SSL" disableCNCheck="true"&gt;
      &lt;sec:keyManagers keyPassword="pass"&gt;
          &lt;sec:keyStore type="JKS" password="pass" file="keystore"/&gt;
      &lt;/sec:keyManagers&gt;
      &lt;sec:trustManagers&gt;
          &lt;sec:keyStore type="JKS" password="pass" file="truststore"/&gt;
      &lt;/sec:trustManagers&gt;
      &lt;sec:cipherSuitesFilter&gt;
          &lt;sec:include&gt;.*_EXPORT_.*&lt;/sec:include&gt;
          &lt;sec:include&gt;.*_EXPORT1024_.*&lt;/sec:include&gt;
          &lt;sec:include&gt;.*_WITH_DES_.*&lt;/sec:include&gt;
          &lt;sec:include&gt;.*_WITH_AES_.*&lt;/sec:include&gt;
          &lt;sec:include&gt;.*_WITH_NULL_.*&lt;/sec:include&gt;
          &lt;sec:exclude&gt;.*_DH_anon_.*&lt;/sec:exclude&gt;
      &lt;/sec:cipherSuitesFilter&gt;
  &lt;/http:tlsClientParameters&gt;
  </code></pre>
  
  <p></p>
  
  <p>If I deploy my application on a Weblogic Server (11g) and perform a request, the handshake fails with the error "unable to find valid certification path to requested target". According to the logs got by the "-Djavax.net.debug=all", the problem is Weblogic gets its java cacert (/jre/lib/security) ignoring the configured CXF client's truststore.</p>
  
  <p>I've tried to write a line <code>&lt;package-name&gt;javax.jws.*&lt;/package-name&gt;</code> in the weblogic-application.xml, but this kills the application with the error "org.springframework.beans.MethodInvocationException: Property 'serviceClass' threw exception; nested exception is java.lang.NoClassDefFoundError: javax/jws/WebService".</p>
  
  <p>Can somebody, please, suggest, how to tell weblogic not to participate in the clent-server communication? </p>
  
  <p><strong>EDIT</strong>. This is the full client configuration (Spring-CXF):</p>
  
  <pre><code>&lt;http:conduit name="&lt;service_namespace_port&gt;.http-conduit"&gt;
          &lt;http:client AutoRedirect="true" Connection="Keep-Alive"/&gt;
          &lt;http:tlsClientParameters secureSocketProtocol="SSL" disableCNCheck="true"&gt;
              &lt;sec:keyManagers keyPassword="pass"&gt;
                  &lt;sec:keyStore type="JKS" password="pass" file="keystore"/&gt;
              &lt;/sec:keyManagers&gt;
              &lt;sec:trustManagers&gt;
                  &lt;sec:keyStore type="JKS" password="pass" file="truststore"/&gt;
              &lt;/sec:trustManagers&gt;
              &lt;sec:cipherSuitesFilter&gt;
                  &lt;sec:include&gt;.*_EXPORT_.*&lt;/sec:include&gt;
                  &lt;sec:include&gt;.*_EXPORT1024_.*&lt;/sec:include&gt;
                  &lt;sec:include&gt;.*_WITH_DES_.*&lt;/sec:include&gt;
                  &lt;sec:include&gt;.*_WITH_AES_.*&lt;/sec:include&gt;
                  &lt;sec:include&gt;.*_WITH_NULL_.*&lt;/sec:include&gt;
                  &lt;sec:exclude&gt;.*_DH_anon_.*&lt;/sec:exclude&gt;
              &lt;/sec:cipherSuitesFilter&gt;
          &lt;/http:tlsClientParameters&gt;
      &lt;/http:conduit&gt;
  
      &lt;jaxws:client id="service"
                    serviceClass="foo.bar.ServiceClass"
                    address="&lt;service_url&gt;" /&gt;
      &lt;bean id="client" class="foo.bar.ClientClass"/&gt;
  </code></pre>
  
  <p><strong>EDIT</strong>. Accordng to <a href="https://stackoverflow.com/questions/7275063/how-to-set-up-apache-cxf-client-to-use-websphere-truststore-receiving-no-trus">this post</a>, I've changed the 
  <code>&lt;http:conduit name="&lt;service_namespace_port&gt;.http-conduit"&gt;</code> to <code>&lt;http:conduit name="*.http-conduit"&gt;</code> 
  and now I'm getting the error "nested exception is java.lang.RuntimeException: Cannot create a secure XMLInputFactory". Some time ago I had this error and the solution I've found is <a href="https://stackoverflow.com/questions/16903216/cxf-2-7-x-woodstox-compatibility-via-maven">using the system property</a>. But it does not fit any more... 
  Does anybody know, how to fix this?</p>