Hi Bob I've been looking at this and it turns out that for some reason the binding.http processor no longer reads the policy information when it's provided in the composite file. Not sure how this piece of code got knocked at as presumably it used to work given that the store-secure sample exists. Someone else has spotted this and raised a JIRA (https://issues.apache.org/jira/browse/TUSCANY-3125). The long and short of this being that your configuration won't work currently because the code is wrong. Apologies for that.
I have a fix which I'm testing but I want to check with Luciano (who wrote this binding in the first place) what the history behind this is and whether there is a good reason for this omission. Looking at the svn log it probably happened during the merge to include the wire format support. Luciano, are you able to comment? I'll commit the change later today subject to Luciano's response. Regards Simon
