Yet another Java open source WS-Security implementation: WSS4J
WSS4J is a Java library that can be used to sign and verify SOAP Messages with WS-Security information. WSS4J will use Apache Axis and Apache XML-Security projects and will be interoperable with JAX-RPC based server/clients and .NET server/clients.
Davanum Srinivas left a comment in my last post:
It's far ahead in terms of WS-Security UserNameToken Profile and X509 Profile (code and sample is in WSS4J's CVS).
Check it out, you Java geeks.