WSS4J
Boostrapping
You can check out the source code from the cvs repository and create a distribution. If you have maven installed it should be as easy as executing the to following commands:
% maven scm:checkout-project -Dmaven.scm.method=cvs -Dmaven.scm.cvs.module=ws-fx/wss4j/ -Dmaven.scm.cvs.root=:pserver:anoncvs@cvs.apache.org:/home/cvspublic -Dmaven.scm.checkout.dir=.
% maven dist
The first command will download the source code from the CVS repository. The second command (goal) will compile and build the distribution jar file you are looking for. If you don't have maven installed go to Maven for downloading and installation instructions.
OASIS Web Services Security
Refactored org.apache.ws.security.message classes
WS-SecureConversation and WS-Trust
Sandesha (WS-ReliableMessaging)
Implementing WS-* on top of Axis2