How to use digital certificate in a java web service?

/*from my web service Member_Impl implements Member
  Member implements java.rmi.Remote*/
 
public RetrieveByCardResponse retrieveByCard(RetrieveByCardRequest params) throws java.rmi.RemoteException {
    	Member_ServiceLocator locator = null;
    	javax.xml.rpc.Call call = null;
    	Member_Service service = null;
 
    	try {
	locator = new Member_ServiceLocator("https://extwebservices-si.xxx.com/eProxy/member",new QName("RetrieveByCardRequest"));		
	} catch (ServiceException e) {
//500 from the service URL takes us here:
		loger.error(e.getMessage());
	}
		
    	RetrieveByCardResponse cardResponse = null;//Need to make a //call here, but no documentation from the 3rd party API to tell me //what returns this type.
    	return creditCardResponseType;
    }

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:

My wsdl:
 
<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions name="HelloPTSecure" targetNamespace="http://www.tibco.com/secure" 
	xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" 
	xmlns:tns="http://www.tibco.com/secure" 
	xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
	xmlns:xs="http://www.w3.org/2001/XMLSchema" 
	xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"
	xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
	<wsp:Policy wsu:Id="p1">
		<sp:AsymmetricBinding>
			<wsp:Policy>
				<sp:InitiatorToken>
					<wsp:Policy>
						<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
							<wsp:Policy>
								<sp:WssX509V3Token10/>
							</wsp:Policy>
						</sp:X509Token>
					</wsp:Policy>
				</sp:InitiatorToken>
				<sp:RecipientToken>
					<wsp:Policy>
						<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
							<wsp:Policy>
								<sp:WssX509V3Token10/>
							</wsp:Policy>
						</sp:X509Token>
					</wsp:Policy>
				</sp:RecipientToken>
				<sp:AlgorithmSuite>
					<wsp:Policy>
						<sp:TripleDesRsa15 />
					</wsp:Policy>
				</sp:AlgorithmSuite>
			</wsp:Policy>
		</sp:AsymmetricBinding>
		<sp:Wss10>
			<wsp:Policy>
				<sp:MustSupportRefEmbeddedToken />
				<sp:MustSupportRefIssuerSerial />
			</wsp:Policy>
		</sp:Wss10>
		<sp:SignedParts>
			<sp:Body />
		</sp:SignedParts>
  	</wsp:Policy>
  <wsdl:types>
    <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://www.tibco.com/secure" >
			<xs:element name="sayHelloFault">
				<xs:complexType>
					<xs:sequence>
						<xs:element form="unqualified" name="HelloFault" type="xs:string"/>
					</xs:sequence>
				</xs:complexType>
			</xs:element>
			<xs:element name="sayHello">
				<xs:complexType>
					<xs:sequence>
						<xs:element form="unqualified" name="HelloRequest" type="xs:string"/>
					</xs:sequence>
				</xs:complexType>
			</xs:element>
			<xs:element name="sayHelloResponse">
				<xs:complexType>
					<xs:sequence>
						<xs:element form="unqualified" name="HelloResponse" type="xs:string"/>
					</xs:sequence>
				</xs:complexType>
			</xs:element>
	</xs:schema>
  </wsdl:types>
  <wsdl:message name="sayHelloResponse">
    <wsdl:part name="sayHelloResponse" element="tns:sayHelloResponse">
    </wsdl:part>
  </wsdl:message>
  <wsdl:message name="sayHelloFaultMsg">
    <wsdl:part name="sayHelloFault" element="tns:sayHelloFault">
    </wsdl:part>
  </wsdl:message>
  <wsdl:message name="sayHelloRequest">
    <wsdl:part name="sayHelloRequest" element="tns:sayHello">
    </wsdl:part>
  </wsdl:message>
  <wsdl:portType name="HelloPTSecure">
    <wsdl:operation name="sayHello">
      <wsdl:input message="tns:sayHelloRequest"/>
      <wsdl:output message="tns:sayHelloResponse"/>
      <wsdl:fault name="fault" message="tns:sayHelloFaultMsg"/>
    </wsdl:operation>
  </wsdl:portType>
  <wsdl:binding name="HelloPTSecureSOAP" type="tns:HelloPTSecure">
    <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
    <wsp:PolicyReference URI="#p1" wsdl:required="true" />
    <wsdl:operation name="sayHello">	    
		<soap:operation soapAction="sayHello" style="document" />
		<wsdl:input>
			<soap:body parts="sayHelloRequest" use="literal" />
		</wsdl:input>
		<wsdl:output>
			<soap:body parts="sayHelloResponse" use="literal" />
		</wsdl:output>
		<wsdl:fault name="fault">
			<soap:fault name="fault" use="literal" />
		</wsdl:fault>
    </wsdl:operation>
  </wsdl:binding>
  <wsdl:service name="HelloPTSecure">
    <wsdl:port name="HelloPTSecureSOAP" binding="tns:HelloPTSecureSOAP">
      <soap:address location="http://localhost:8080/axis2/services/HelloPTSecure"/>
    	<apwsdl:targetWSDL xmlns:ap="http://namespace.amberpoint.com/amf" 
    		xmlns:apwsdl="urn:com.amberpoint.wsdl" 
    		xmlns:xsd="http://www.w3.org/2001/XMLSchema">
				<apwsdl:URL>
					ARECQVBBRVMCX2FwXzEyOANbojNm8l03ILlTMrCUUgt8TZn7OlBZtjsUuAyYSX95HouzUU8sVohliHS2L68Q8kObxv0HyMsFroLjulOD9KHHY4Wq63IwRp+bY5JqgXmCbA==
				</apwsdl:URL>
				<apwsdl:agentID>uuid:06AA836A-3685-11DE-8E06-6914D26DAA77
				</apwsdl:agentID>
				<apwsdl:uwsID>uuid:FA53EF80-4583-11DE-8BAF-BAFA03E9AA77
				</apwsdl:uwsID>
				<apwsdl:uwsLocalname>HelloProxy1</apwsdl:uwsLocalname>
		</apwsdl:targetWSDL>
    </wsdl:port>
  </wsdl:service>
</wsdl:definitions>
 
 
-------
 
My services.xml:
 
<?xml version="1.0" encoding="UTF-8"?>
 
<serviceGroup>
	<service name="HelloPTSecure">
		<messageReceivers>
			<messageReceiver mep="http://www.w3.org/ns/wsdl/in-out"
				class="com.tibco.www.secure.HelloPTMessageReceiverInOut" />
		</messageReceivers>
		<parameter name="ServiceClass">com.tibco.www.secure.HelloPTSecureImpl</parameter>
		<parameter name="useOriginalwsdl">true</parameter>
		<parameter name="modifyUserWSDLPortAddress">true</parameter>
		<operation name="sayHello" 
			mep="http://www.w3.org/ns/wsdl/in-out"
			namespace="http://www.tibco.com/secure">
			<actionMapping>sayHello</actionMapping>
			<outputActionMapping>
				http://www.tibco.com/secure/HelloPTSecure/sayHelloResponse
			</outputActionMapping>
			<faultActionMapping faultName="fault">
				http://www.tibco.com/secure/HelloPTSecure/sayHello/Fault/fault
			</faultActionMapping>
			<faultActionMapping faultName="sayHelloFaultMsg">
				urn:sayHellosayHelloFaultMsg
			</faultActionMapping>
		</operation>
		<module ref="rampart" />
		<wsp:Policy xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"
			xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
			xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
			wsu:Id="p1">
			<sp:AsymmetricBinding>
				<wsp:Policy>
					<sp:InitiatorToken>
						<wsp:Policy>
							<sp:X509Token
								sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
								<wsp:Policy>
									<sp:WssX509V3Token10 />
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:InitiatorToken>
					<sp:RecipientToken>
						<wsp:Policy>
							<sp:X509Token
								sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
								<wsp:Policy>
									<sp:WssX509V3Token10 />
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:RecipientToken>
					<sp:AlgorithmSuite>
						<wsp:Policy>
							<sp:TripleDesRsa15 />
						</wsp:Policy>
					</sp:AlgorithmSuite>
				</wsp:Policy>
			</sp:AsymmetricBinding>
			<sp:Wss10>
				<wsp:Policy>
					<sp:MustSupportRefEmbeddedToken />
					<sp:MustSupportRefIssuerSerial />
				</wsp:Policy>
			</sp:Wss10>
			<sp:SignedParts>
				<sp:Body />
			</sp:SignedParts>
			<RampartConfig xmlns="http://ws.apache.org/rampart/policy">
				<user>user</user>
				<passwordCallbackClass>
					com.tibco.www.secure.client.PasswordCallbackHandler
				</passwordCallbackClass>
				<signatureCrypto>
					<crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<property name="org.apache.ws.security.crypto.merlin.keystore.type">
							JKS
						</property>
						<property name="org.apache.ws.security.crypto.merlin.file">
							C:/Projects/workspace/HelloAxis2Secure/security/keystore.ks
						</property>
						<property name="org.apache.ws.security.crypto.merlin.keystore.password">
							pwd
						</property>
					</crypto>
				</signatureCrypto>
			</RampartConfig>
		</wsp:Policy>
	</service>
</serviceGroup>
 
-------
 
My rampart-config.xml:
 
<?xml version="1.0" encoding="UTF-8"?>
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
	xmlns="http://ws.apache.org/rampart/policy">
	<RampartConfig>
		<user>dtaktst</user>
		<userCertAlias>dtaktst</userCertAlias>
		<passwordCallbackClass>
			com.ttdev.secure.client.PasswordCallbackHandler
		</passwordCallbackClass>
		<signatureCrypto>
			<crypto provider="org.apache.ws.security.components.crypto.Merlin">
				<property name="org.apache.ws.security.crypto.merlin.keystore.type">
					JKS
				</property>
				<property name="org.apache.ws.security.crypto.merlin.file">
					C:/Projects/workspace/HelloAxis2Secure/security/keystore.ks
				</property>
				<property name="org.apache.ws.security.crypto.merlin.keystore.password">
					pwd
				</property>
			</crypto>
		</signatureCrypto>
	</RampartConfig>
</wsp:Policy>
 
-----
 
My client:
 
import java.io.FileNotFoundException;
import java.rmi.RemoteException;
 
import javax.xml.stream.XMLStreamException;
 
import org.apache.axiom.om.OMElement;
import org.apache.axis2.client.Options;
 
import com.tibco.www.secure.SayHelloFaultMsg;
import com.tibco.www.secure.client.HelloPTSecureStub.SayHelloRequest;
import com.tibco.www.secure.client.HelloPTSecureStub.SayHelloResponse;
import org.apache.axis2.context.ConfigurationContext;
import org.apache.axis2.context.ConfigurationContextFactory;
import org.apache.axiom.om.impl.builder.StAXOMBuilder;
//import org.apache.axis2.description.PolicyInclude;
import org.apache.neethi.Policy;
import org.apache.neethi.PolicyEngine;
 
public class HelloPTSecureClient {
	
	Options options = null;
	
	public static void  main(String[] args) throws RemoteException, FileNotFoundException, XMLStreamException, SayHelloFaultMsg {
		/*Tell the Axis client to load configurations
		from the "repository" folder in the current
		folder (project root). Here it will find the
		module archive for rampart.*/
		ConfigurationContext context = ConfigurationContextFactory.createConfigurationContextFromFileSystem("C:/AXIS2/axis2-1.5/repository/services/HelloPTSecure/repository");
		HelloPTSecureStub stub = new HelloPTSecureStub(context,"http://localhost:1234/axis2/services/HelloPTSecure");
		stub._getServiceClient().engageModule("rampart");
		StAXOMBuilder builder = new StAXOMBuilder("rampart-config.xml");
		OMElement configElement = builder.getDocumentElement();
		Policy rampartConfig = PolicyEngine.getPolicy(configElement);
		//deprecated:
		//stub._getServiceClient().getAxisService().getPolicyInclude().addPolicyElement(PolicyInclude.SERVICE_POLICY, rampartConfig);
		//replaced with:
		stub._getServiceClient().getAxisService().getPolicySubject().attachPolicy(rampartConfig);
		SayHelloRequest request = new SayHelloRequest();
		request.setHelloRequest("Dummy");
		SayHelloResponse result = stub.sayHello(request);
		System.out.println(result);
	}
 
	public void setOptions(Options options) {
		this.options = options;		
	}
 
	public OMElement sendReceive(OMElement request) {
		//FIXME
		return request;
	}
}
 
---------
 
My PasswordCallbackHandler:
 
public class PasswordCallbackHandler implements CallbackHandler {
 
	public void handle(Callback[] callbacks) throws IOException,UnsupportedCallbackException {
		for (int i = 0; i < callbacks.length; i++) {
			WSPasswordCallback pwcb = (WSPasswordCallback) callbacks[i];
			String id = pwcb.getIdentifer();
			if (id.equals("user")) {
				pwcb.setPassword("pwd");//BAD PRACTICE - refer to a property
			}else {
				throw new UnsupportedCallbackException(callbacks[i],"check failed!");
			}
			
		}
	}
}
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:
323:
324:
325:
326:
327:
328:
329: