When switching to GlassFish V3, I get the error message from the server:
INFO: Deployment of SecureCalculatorClientApp done is 422 ms
INFO: WSP5018: Loaded WSIT configuration from file:
file:/space/home/mkuchtiak/NetBeansProjects/SecureCalculator/SecureCalculatorClientApp/build/web/WEB-INF/classes/META-INF/wsit-client.xml.
SEVERE: WSSTUBE0016: TrustStore URL was obtained as NULL from ConfigAssertion.
SEVERE: WSSTUBE0023: Error in creating new instance of SecurityClientTube
java.lang.RuntimeException: WSSTUBE0016: TrustStore URL was obtained as NULL from ConfigAssertion.
        at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.populateTruststoreProps(SecurityTubeBase.java:1407)
        at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.populateConfigProperties(SecurityTubeBase.java:1310)
        at com.sun.xml.wss.jaxws.impl.SecurityClientTube.configureClientHandler(SecurityClientTube.java:767)
        at com.sun.xml.wss.jaxws.impl.SecurityClientTube.<init>(SecurityClientTube.java:170)
        at com.sun.xml.wss.provider.wsit.SecurityTubeFactory.createTube(SecurityTubeFactory.java:222)
        at com.sun.xml.ws.assembler.TubeCreator.createTube(TubeCreator.java:87)
        at
com.sun.xml.ws.assembler.TubelineAssemblerFactoryImpl$MetroTubelineAssembler.createClient(TubelineAssemblerFactoryImpl.java:120)
        at com.sun.xml.ws.client.Stub.createPipeline(Stub.java:210)
        at com.sun.xml.ws.client.Stub.<init>(Stub.java:191)
        at com.sun.xml.ws.client.Stub.<init>(Stub.java:170)
        at com.sun.xml.ws.client.sei.SEIStub.<init>(SEIStub.java:81)
        at com.sun.xml.ws.client.WSServiceDelegate.createEndpointIFBaseProxy(WSServiceDelegate.java:602)
        at com.sun.xml.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:342)
        at com.sun.xml.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:324)
        at com.sun.xml.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:306)
        at javax.xml.ws.Service.getPort(Service.java:99)
        at org.me.calculator.client.CalculatorWSService.getCalculatorWSPort(CalculatorWSService.java:72)
        at org.me.calculator.client.ClientServlet.processRequest(ClientServlet.java:66)
        at org.me.calculator.client.ClientServlet.doGet(ClientServlet.java:97)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:734)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at org.apache.catalina.core.StandardWrapper.service(StandardWrapper.java:1505)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:293)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:188)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:641)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:97)
        at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:85)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:185)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:641)
        at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:338)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:237)
        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:202)
        at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:752)
        at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:660)
        at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:911)
        at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:164)
        at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:135)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:102)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:88)
        at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:76)
        at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:53)
        at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:57)
        at com.sun.grizzly.NIOContext.execute(NIOContext.java:510)
        at com.sun.grizzly.SelectorHandlerRunner.handleSelectedKey(SelectorHandlerRunner.java:357)
        at com.sun.grizzly.SelectorHandlerRunner.handleSelectedKeys(SelectorHandlerRunner.java:257)
        at com.sun.grizzly.SelectorHandlerRunner.doSelect(SelectorHandlerRunner.java:194)
        at com.sun.grizzly.SelectorHandlerRunner.run(SelectorHandlerRunner.java:129)
        at com.sun.grizzly.util.FixedThreadPool$BasicWorker.dowork(FixedThreadPool.java:379)
        at com.sun.grizzly.util.FixedThreadPool$BasicWorker.run(FixedThreadPool.java:360)
        at java.lang.Thread.run(Thread.java:619)

Here is the response from ClientServlet :
Servlet ClientServlet at /SecureCalculatorClientApp
java.lang.RuntimeException: WSSTUBE0023: Error in creating new instance of SecurityClientTube 

You need to have installed latest Metro version on top of GF v2 to make Secure Calculator work.

As for v3, it's not a bug in NB, as v3 in the end shall support jsr109 and thus the calculator sample should not
necessarily provide absolute location of the keystore file. However, metro support for this still seems to be broken,
thus I'll file issue for Metro 2.0 and downgrade this one. As a workaround - go to Edit WS Attributes on client, and set
[] Use Development Defaults - that should set the absolute value correctly. 

To solve this on client side, we'd have to add more logic when creating the sample, and always replace the absolute path
with the right value taken from server.

Changing to enhancement to not forget that we should take care of server changes and update the absolute paths.