title: CXF org.apache.cxf.binding.soap.SoapFault: Rejected by policy. (from client)
body: <p>I need to develop a SOAP client using CXF to call a webservice in a testing environment. I received from the webservice provider (an external agency) the test .P12 certificate. </p>
  
  <p>This certificate hasn't been released from a CA.
  I've added (only for testing purpose) the CA to the cacerts file.
  But what I receive when send the message it's finally a response such this:</p>
  
  <pre><code>INFO: Inbound Message
  ----------------------------
  ID: 1
  Response-Code: 500
  Encoding: ISO-8859-1
  Content-Type: text/xml
  Headers: {connection=[close], content-type=[text/xml], X-Backside-Transport=[FAIL FAIL]}
  Payload: &lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"&gt;&lt;env:Body&gt;&lt;env:Fault&gt;&lt;faultcode&gt;env:Client&lt;/faultcode&gt;&lt;faultstring&gt;Rejected by policy. (from client)&lt;/faultstring&gt;&lt;/env:Fault&gt;&lt;/env:Body&gt;&lt;/env:Envelope&gt;
  --------------------------------------
  </code></pre>
  
  <p>During the handshake I can see also this (activating javax.net.debug=ssl <strong>I've replaced real CA details in log with some XXYY</strong>):</p>
  
  <pre><code>*** CertificateRequest
  Cert Types: RSA, DSS, ECDSA
  Supported Signature Algorithms: SHA512withRSA, Unknown (hash:0x6, signature:0x2), SHA512withECDSA, SHA384withRSA, Unknown (hash:0x5, signature:0x2), SHA384withECDSA, SHA256withRSA, Unknown (hash:0x4, signature:0x2), SHA256withECDSA, SHA224withRSA, Unknown (hash:0x3, signature:0x2), SHA224withECDSA, SHA1withRSA, SHA1withDSA, SHA1withECDSA
  Cert Authorities:
  &lt;CN=CA XYZ xyz Test, OU=XXYYXX xxyy, O=xxyy, C=XX&gt;
  *** ServerHelloDone
  Warning: no suitable certificate found - continuing without client authentication
  *** Certificate chain
  &lt;Empty&gt;
  ***
  *** ECDHClientKeyExchange
  </code></pre>
  
  <p>I've tried some solutions already posted on SO, but nothing seems it's working for me. Any idea? Thanks a lot!</p>