http://cwiki.apache.org/CXF20DOC/ws-security.html
http://blog.youkuaiyun.com/sfdev/archive/2008/03/20/2201004.aspx
http://www.blogjava.net/openssl/archive/2006/08/08/xfire_wss4j.html
http://www.builder.com.cn/2007/0530/405081.shtml
http://blog.youkuaiyun.com/cocojiji5/archive/2008/12/20/3564440.aspx