In CXF 4.0.5 we updated a few test certs - this was in respect to IBM Semeru & RedHat JDKs: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310511&version=12354390
These should not have caused any particular issues for regular runtime. You can test with CXF 4.0.4 to rule out those cert updates. Getting zero content I'd be looking into if the Hand Shake completed. Which JVM Vendor/Version/ISA/OS is in use here? On the command line pass in the following parameters: -Djavax.net.debug=all This will output a lot of tracing data, etc.
