I was working on a Weblogic Portal application that needed to get information from a secure (WS-Security) third party web service over https. This web service used a legacy (pre-OASIS) WS-Security namespace and modern clients (like the one bundled with Weblogic server) don't create messages that conform to the old specification. Here's what I did to work around this restriction...