Hey, I have a java client that work against jboss4.2 via stateless session bean. I followed this tutorial in order to created secured transport between the client and the server: http://wiki.jboss.org/wiki/Accessing_EJB3s_over_HTTP_HTTPS In the tutorial it required to pass the truststore to the JVM client – like this: -Djavax.net.ssl.trustStorePassword=opensource I didn’t pass the password and its still work. Why is it still work? Thank you View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4150950#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...