HTTPS Client-Configuration

[Benjamin Ernst]

 Hi,

I am having problems with the Client-Configuration for HTTPS. My
configuration looks like this:

<http:conduit name="*.http-conduit">
    <http:tlsClientParameters disableCNCheck="true">
      <sec:trustManagers>
          <sec:keyStore type="JKS" password="password"
               file="conf/truststore.jks"/>
      </sec:trustManagers>
      <sec:keyManagers keyPassword="password">
           <sec:keyStore type="JKS" password="password"
                file="conf/localhost.jks"/>
      </sec:keyManagers>
      <sec:cipherSuitesFilter>
        <!-- these filters ensure that a ciphersuite with
          export-suitable or null encryption is used,
          but exclude anonymous Diffie-Hellman key change as
          this is vulnerable to man-in-the-middle attacks -->
        <sec:include>.*_EXPORT_.*</sec:include>
        <sec:include>.*_EXPORT1024_.*</sec:include>
        <sec:include>.*_WITH_DES_.*</sec:include>
        <sec:include>.*_WITH_NULL_.*</sec:include>
        <sec:exclude>.*_DH_anon_.*</sec:exclude>
      </sec:cipherSuitesFilter>
    </http:tlsClientParameters>
   </http:conduit>

It seems that CXF doesn't use the http:conduit-part at all. No matter what I
type in there or if I remove it from the xml, CXF always uses the Truststore
from the Java-Installation (*/lib/security/cacerts).

How can I tell CXF to use the truststore and keystore I provide?

Thanks for any help,

Benjamin