Apache wss4j is an implementation of the oasis web services security framework (ws-security). it can be used to sign and verify soap messages with ws-security information.