How to make a Java client for a WCF service secured with X.509?

Question

I have a WCF service that uses X.509 certificates for authentication. What's the best method of creating a Java client that can use that service? I've heard of Axis, CXF, Tango, and WSS4J, but I'm not sure which supports X.509 and which one is a good way of working with WCF.

Answer 1

I would guess Apache Axis2 or Sun's Metro . Both support WS-Security out of the box. There may be details you might have to tweak to get them talking though. See Yaron Naveh's Web Services 2.0 Blog .

Answer 2

Do you need to support ws-security markings in the envelope? Or does the ssl connection itself rely on client certificate authentication? (I would have added this as a comment rather than an answer, but I don't have the necessary 50 reputation.)