Asymmetric encryption with ws-security?

[ops]

Hi everybody,

I need to encrypt a web service via ws-security. In every example I found there is always a mutual encryption. This means that both, client and server encode their messages using the public key of their counterpart. But this also means that the jboss web service needs a truststore containing the clients certificate. I wonder if there is no asymmetric way as in SSL, where the client simply donwloads the server certificate and they are able to exchange a secret key to communicate with. I know that it is possible to encrypt the web service request via the web containers SSL capabilities, but I definitely have to use the ws stack.
Any Ideas?

Thanks in advance,
Oliver.

[ops]

Hello again,

sorry, but this question is urgent. I´ve already been trying several things and I´m going mad with this. Is there really no way to "download" the servers public key to the client? In my opinion it should be easy to attach the servers certificate to the soap message. Should I try asking the security forum?

Greets, Oliver

[peterj]

As far as I know what you are asking is not possible. There were some discussions about how ws-security works, along with complete examples, a while back: http://www.jboss.com/index.html?module=bb&op=viewtopic&t=127824