如何在JAX-WS客户端上指定客户端证书和客户端证书身份验证

我正在用Java编写JAX-WS客户机。对WebService的访问受客户端证书保护。我知道客户端证书是正确的,因为只有当客户端证书被导入(在Firefox中)时,我才能在Firefox中获得WSDL。

但我在编写应该使用WebService的java应用程序时遇到了问题。我要做的是:

  MyOwnService svc = new MyOwnService(getServerURL(), MYOWNSERVICE_QNAME);
...
...
private URL getServerURL() throws IOException {
  URL url = new URL((String) cfg.get(ConfigData.SERVER_URL));

  HttpsURLConnection con = (HttpsURLConnection) url.openConnection();

  try {
    con.setSSLSocketFactory(getFactory(new File("/etc/pki/wildfly/client.keystore"), "123456"));
  } catch (Exception exc) {
    throw new IOException("Client certificate error!", exc);
  }

  return url;
}

private SSLSocketFactory getFactory(File pKeyFile, String pKeyPassword ) 
  throws ... {

  KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("SunX509");
  KeyStore keyStore = KeyStore.getInstance("PKCS12");

  InputStream keyInput = new FileInputStream(pKeyFile);
  keyStore.load(keyInput, pKeyPassword.toCharArray());
  keyInput.close();

  keyManagerFactory.init(keyStore, pKeyPassword.toCharArray());

  SSLContext context = SSLContext.getInstance("TLS");
  context.init(keyManagerFactory.getKeyManagers(), null, new SecureRandom());

  return context.getSocketFactory();
}

但这不起作用。如果运行此命令,则会在 MyOwnService 建造师

java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty.

如何实现支持客户端认证的JAX-WS客户端?