Very simple question: using XWS to generate static data

Question

Hi,
I'm testing interop for JWSDP and a soon-to-be-released RSA Security, Inc. product that will also provide WSS as well as XML signatures, XML encryption, ...
I have already used JWSDP -- xmldsig -- to generate a bunch of XML docs that were signed using JWSDP (all varieties of KeyInfo, signing algos, ...).
I need to do something similar for WSS -- using xws-security.
Do I need a Web container in order to be able to do this? (Again, recalling that all I want to do is generate thousands of encrypted, signed, encrypted & signed, signed & encrypted SOAP messages (using UsernameTokens, X509Tokens, ...))
Do you have any examples that might save me some time?
I have looked through all of the examples in the "interop" and "simple" subdirs of the "samples" subdir of "xws-security" and most of these presume that there's some RPC going on, which doesn't really fit the model of what I'm trying to do here. Got any ideas? Even basic ones? Even big ones?
TIA.
Liz

Answer 1

I've kinda answered my own question in part:
SecurableSoapMessage ssm = new SecurableSoapMessage(soapMessage);
ssm.setFilterParameter(FilterParameterConstants.BINARY_SEC_TOKEN,new X509SecurityToken(ssm.getEnvelope().getOwnerDocument(),cert));
ExportCertificateTokenFilter estf = new ExportCertificateTokenFilter();     
estf.process(ssm);
ExportSignatureFilter esf = new ExportSignatureFilter(new DirectReferenceStrategy(cert));
esf.process(ssm);
that transforms the soap message, adding the wsse xml, then I try to sign it:
SignFilter sf = new SignFilter(new X509IssuerSerialStrategy(cert));
sf.process(ssm);
and this fails saying I don't have a privatekey, which makes sense. I need to create a DefaultSecurityEnvironmentImpl probably, define the key in there and then attach that to the SecurableSoapMessage? The problem is, I have the cert and privake key stored on files, how do I go about loading that into the SecurityEnvironment? Would this SecurityEnvironment handle cert chain validation then, since it can be constructed with a trusted keystore?