java - wcf 服务/java 客户端secureconversation 安全上下文

Question

我需要以下解决方案：

有一个带有 SOAP1.2 绑定和此安全策略的 .NET WCF WebService：（
来自 wsdl：SecureConversationToken）

<wsp:Policy wsu:Id="BasicEndpoint_policy">
        <wsp:ExactlyOne>
            <wsp:All>
                <sp:SymmetricBinding
                    xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                    <wsp:Policy>
                        <sp:ProtectionToken>
                            <wsp:Policy>
                                <sp:SecureConversationToken
                                    sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                                    <wsp:Policy>
                                        <sp:RequireDerivedKeys />
                                        <sp:BootstrapPolicy>
                                            <wsp:Policy>
                                                <sp:SignedParts>
                                                    <sp:Body />
                                                    <sp:Header Name="To"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="From"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="FaultTo"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="ReplyTo"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="MessageID"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="RelatesTo"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                    <sp:Header Name="Action"
                                                        Namespace="http://www.w3.org/2005/08/addressing" />
                                                </sp:SignedParts>
                                                <sp:EncryptedParts>
                                                    <sp:Body />
                                                </sp:EncryptedParts>
                                                <sp:SymmetricBinding>
                                                    <wsp:Policy>
                                                        <sp:ProtectionToken>
                                                            <wsp:Policy>
                                                                <sp:SpnegoContextToken
                                                                    sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                                                                    <wsp:Policy>
                                                                        <sp:RequireDerivedKeys />
                                                                    </wsp:Policy>
                                                                </sp:SpnegoContextToken>
                                                            </wsp:Policy>
                                                        </sp:ProtectionToken>
                                                        <sp:AlgorithmSuite>
                                                            <wsp:Policy>
                                                                <sp:Basic256 />
                                                            </wsp:Policy>
                                                        </sp:AlgorithmSuite>
                                                        <sp:Layout>
                                                            <wsp:Policy>
                                                                <sp:Strict />
                                                            </wsp:Policy>
                                                        </sp:Layout>
                                                        <sp:IncludeTimestamp />
                                                        <sp:EncryptSignature />
                                                        <sp:OnlySignEntireHeadersAndBody />
                                                    </wsp:Policy>
                                                </sp:SymmetricBinding>
                                                <sp:Wss11>
                                                    <wsp:Policy>
                                                        <sp:MustSupportRefKeyIdentifier />
                                                        <sp:MustSupportRefIssuerSerial />
                                                        <sp:MustSupportRefThumbprint />
                                                        <sp:MustSupportRefEncryptedKey />
                                                    </wsp:Policy>
                                                </sp:Wss11>
                                                <sp:Trust10>
                                                    <wsp:Policy>
                                                        <sp:MustSupportIssuedTokens />
                                                        <sp:RequireClientEntropy />
                                                        <sp:RequireServerEntropy />
                                                    </wsp:Policy>
                                                </sp:Trust10>
                                            </wsp:Policy>
                                        </sp:BootstrapPolicy>
                                    </wsp:Policy>
                                </sp:SecureConversationToken>
                            </wsp:Policy>
                        </sp:ProtectionToken>
                        <sp:AlgorithmSuite>
                            <wsp:Policy>
                                <sp:Basic256 />
                            </wsp:Policy>
                        </sp:AlgorithmSuite>
                        <sp:Layout>
                            <wsp:Policy>
                                <sp:Strict />
                            </wsp:Policy>
                        </sp:Layout>
                        <sp:IncludeTimestamp />
                        <sp:EncryptSignature />
                        <sp:OnlySignEntireHeadersAndBody />
                    </wsp:Policy>
                </sp:SymmetricBinding>
                <sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                    <wsp:Policy>
                        <sp:MustSupportRefKeyIdentifier />
                        <sp:MustSupportRefIssuerSerial />
                        <sp:MustSupportRefThumbprint />
                        <sp:MustSupportRefEncryptedKey />
                    </wsp:Policy>
                </sp:Wss11>
                <sp:Trust10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                    <wsp:Policy>
                        <sp:MustSupportIssuedTokens />
                        <sp:RequireClientEntropy />
                        <sp:RequireServerEntropy />
                    </wsp:Policy>
                </sp:Trust10>
                <wsaw:UsingAddressing />
            </wsp:All>
        </wsp:ExactlyOne>
    </wsp:Policy>  

我有一个发出请求调用的 Apache CXF (wsdl2java) 客户端。
如果可能的话，我如何添加/协商请求的安全上下文令牌（cxf 版本 2.5.0）？
我对此很陌生，所以我正在寻找一个 guide4dummies ;)