Sorry for the delay. Have you made any progress with this issue?
A client proxy for an EJB3 will start up a Remoting client configured on the remote server. If so configured, it will create a SocketFactory which, in the case of the sslsocket transport (and the other ssl transports), will refer to a truststore. If EJB3 with sslsocket is configured to use an SSLSocketBuilder bean, then the truststore will just get read once. I'm thinking that what you need to do is move the SSLSocketBuilder configuration information to the sslsocket Connector bean so that each time a Remoting client is created, it will create a new SocketFactory, configuring it with a newly read truststore. See Chapter 5 of the Remoting Guide for more information (http://docs.jboss.org/jbossremoting/docs/index.html).