I enabled org.apache.ws logging here is more debug from logs
-- View this message in context: http://cxf.547215.n5.nabble.com/moving-to-cxf-2-5-org-apache-ws-security-WSSecurityException-The-signature-or-decryption-was-invalid-tp5077993p5078579.html Sent from the cxf-user mailing list archive at Nabble.com.