sorry, but this question is urgent. IÂ´ve already been trying several things and IÂ´m going mad with this. Is there really no way to "download" the servers public key to the client? In my opinion it should be easy to attach the servers certificate to the soap message. Should I try asking the security forum?
As far as I know what you are asking is not possible. There were some discussions about how ws-security works, along with complete examples, a while back: http://www.jboss.com/index.html?module=bb&op=viewtopic&t=127824