Page History

...

It is important to note that:

1. You If you are using CXF 2.0.x, you must add the SAAJ(In/Out)Interceptors if you're using WS-Security. (This is done automatically for you with CXF 2.1) These enabled enable creation of a DOM for each request/response which is required for WS-Security.
2. You may not need both in and out WS-Security. For instance, if you are just requiring Signature signatures on incoming messages, you'll just need the incoming interceptors.

...

To sign our message, we'll want to configure our client to sign the message via it's its private key and configure the server to verify the signature using the Client's public key. To do this you must ensure that the Client's public key has been imported into the server's keystore using keytool.

...