Why client cert is not sent during SSL connection? CXF 2.7.9
<h1> Background </h1>

<p>My application is deployed in jboss 5, communicates with a Web service server which requires MASSL. (2-way SSL)</p>

<h1> Issue </h1>

<p>By looking at the log of SSL connection, client cert is not sent even it has been loaded at the beginning. </p>

<p>Log details as below, <strong>client cert is supposed to be sent after server hello is done</strong>. </p>

<p><strong>[EDIT]</strong> Added more details based on reply</p>

<ol>
<li><p>added <strong>CertificateRequest</strong> in log</p></li>
<li><p>Cient certificate actually matches above request - (a) algorithm is RSA, (b) signed by one the CAs speficied in the request</p></li>
</ol>

<p>logs: </p>

<pre><code>2016-11-25 09:32:38,434 INFO  [STDOUT] (http-0.0.0.0-8080-4) keyStore is : /XX/XX/my.jks
2016-11-25 09:32:38,434 INFO  [STDOUT] (http-0.0.0.0-8080-4) keyStore type is : jks
2016-11-25 09:32:38,434 INFO  [STDOUT] (http-0.0.0.0-8080-4) keyStore provider is :
2016-11-25 09:32:38,434 INFO  [STDOUT] (http-0.0.0.0-8080-4) init keystore
2016-11-25 09:32:38,440 INFO  [STDOUT] (http-0.0.0.0-8080-4) init keymanager of type SunX509
2016-11-25 12:00:04,420 INFO  [STDOUT] (http-0.0.0.0-8080-4) ***
2016-11-25 12:00:04,421 INFO  [STDOUT] (http-0.0.0.0-8080-4) found key for : mykey
2016-11-25 12:00:04,432 INFO  [STDOUT] (http-0.0.0.0-8080-4) chain [0] = [
[
  Version: V3
  Subject: CN=xx.xxx.xxx.com, OU=xxxxxxxx, O=xxxx, L=xxxx, ST=xxx, C=xx
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

 Issuer: CN=abc AD Object CA1, DC=core, DC=dir, DC=def, DC=com

...

2016-11-25 12:00:05,520 INFO  [STDOUT] (http-0.0.0.0-8080-4) *** CertificateRequest
2016-11-25 12:00:05,521 INFO  [STDOUT] (http-0.0.0.0-8080-4) Cert Types:
2016-11-25 12:00:05,521 INFO  [STDOUT] (http-0.0.0.0-8080-4) RSA
2016-11-25 12:00:05,521 INFO  [STDOUT] (http-0.0.0.0-8080-4) Cert Authorities:
2016-11-25 12:00:05,521 INFO  [STDOUT] (http-0.0.0.0-8080-4) &lt;CN=abc AD Object CA1, DC=core, DC=dir, DC=def, DC=com&gt;
2016-11-25 12:00:05,521 INFO  [STDOUT] (http-0.0.0.0-8080-4) &lt;CN=abc Policy CA1, O=gh Corporation Limited&gt;
2016-11-25 12:00:05,522 INFO  [STDOUT] (http-0.0.0.0-8080-4) &lt;CN=abc Root CA&gt;

2016-11-25 09:32:39,475 INFO  [STDOUT] (http-0.0.0.0-8080-4) *** ServerHelloDone
2016-11-25 09:32:39,475 INFO  [STDOUT] (http-0.0.0.0-8080-4) *** Certificate chain
2016-11-25 09:32:39,475 INFO  [STDOUT] (http-0.0.0.0-8080-4) ***
2016-11-25 09:32:39,482 INFO  [STDOUT] (http-0.0.0.0-8080-4) *** ClientKeyExchange, RSA PreMasterSecret, TLSv1
2016-11-25 09:32:39,482 INFO  [STDOUT] (http-0.0.0.0-8080-4) http-0.0.0.0-8080-4, WRITE: TLSv1 Handshake, length = 269
2016-11-25 09:32:39,482 INFO  [STDOUT] (http-0.0.0.0-8080-4) SESSION KEYGEN:
2016-11-25 09:32:39,483 INFO  [STDOUT] (http-0.0.0.0-8080-4) PreMaster Secret:
</code></pre>

<h1> question </h1>

<p>Did I missing something here?　</p>