I'm using a custom LoginModule and want to authenticate via X509Certificate. My intention is to pass the certificate using SecurityAssociationCallback, but it appears that the call to the handle method never reaches my custom CallbackHandler. Instead I get Password and NameCallbacks even if these are not invoked from my code i.e. not from the LoginModule. Any ideas?