Signing and Encrypting with SAML as supporting token

[Christian Mielke <cm...@nc-ag.de>]

Hello,
I use the policy attached to this mail for my service. The request (also attached) is signed and encrypted and contains a SAML 1.1 token as suporting token. The service throws always an illegal argument exception: 
null alias passed to getCertificateChain.
at org.bouncycastle.jce.provider.JDKPKCS12KeyStore.engineGetCertificateChain(Unknown Source)
at java.security.KeyStore.getCertificateChain(KeyStore.java:788)
Decrypting seems to work but encrypting the response not. I use "useReqSigCert" as encryption user as you see in the policy. If I define a specified user like "peter" for the encryption user, it works. Why can't I use "useReqSigCert" in combination with this request?
Greetings
Christian