title: What would cause SSL negotiations to succeed under .NET but fail under Java?
body: <p>We have to create a web service client using Apache CXF in Java.  The thing is I cannot seem to get the SSL session to properly engage.  Either it fails altogether, the server fails to decipher what is sent to it once the application data is transmitted or I fail to read the responses from the server.</p>
  
  <p>However when trying the same transaction using a simple soap test client built in .NET everything runs smoothly.</p>
  
  <p>Server is using double authentication.</p>
  
  <p>Everything is certificate based (x509) stored in the windows certificate store (windows-MY and windows-ROOT)</p>
  
  <hr>
  
  <p>edit
  yes, double authentication is indeed client AND server authentication.</p>
  
  <p>Thus far using the bountyCastle provider instead of SunMSCAPI seems to get further but still cannot get the client authentication to work.</p>
  
  <p>PLatform of client CXF 2.2.9, Sun JDK 1.6_21
  server IIS 6 ASP.NET unfortunately is all I could gather, I have no control over the server and must use it as-is.</p>
  
  <p><strong>update</strong>
  I am using a JKS keystore now but still am getting the problem.  It seems the client is not sending his certificate to the server as part of the authentication process.  As a result I get a 403.7 error from the server.</p>
  
  <p>Funny thing is that I receive this error message as an HTML page that must first be decrypted before it is readable !</p>