private BinarySecurityToken resolveKeyIdentifier(KeyIdentifier identifier) throws WSSecurityException
{
// Support only SKI at the moment
X509Certificate cert = store.getCertificateBySubjectKeyIdentifier(identifier.getIdentifier());
if (cert == null)
throw new SecurityTokenUnavailableException("Could not locate certificate by key identifier");
return new X509Token(cert, identifier.getDocument());
}