JBWS-1316 - Add support for a configurable time tolerance va

[dlofthouse]

I am ready to commit changes for the following Jira issue to trunk, before I do I just quickly wanted to raise the configuration approach here before I add it to the user guide.

http://jira.jboss.com/jira/browse/JBWS-1316

The changes are in the following branch in SVN: -

https://svn.jboss.org/repos/jbossws/stack/native/branches/dlofthouse/JBWS-1316

The relevant commits are: -

http://fisheye.jboss.com/changelog/JBossWS/?cs=6366
http://fisheye.jboss.com/changelog/JBossWS/?cs=6416

This change adds the following element to the global configuration area of the jboss-wsse configuration: -

<timestamp-verification createdTolerance="5"
 warnCreated="false"
 expiresTolerance="10"
 warnExpires="false" />

This allows for a tolerance to be set individually for the comparison of the created and expires value, the tolerance is in seconds in line with other time values in the configuration.

The warn attributes allow for a warning to be logged if a message is accepted that would not normally be accepted without the tolerance.

If this configuration is not provided then the default is the old behaviour of only using the time the message is received in the comparisons.

[ropalka]

I don't see any problems to commit this to the trunk ;)

[thomas.diesler]

Yes, its fine. Please monitor hudson when your change becomes effective

[dlofthouse]

Thanks, I have committed the changes.

The configuration is documented here: -

ttp://jbws.dyndns.org/mediawiki/index.php?title=WS-Security_options#Advanced_tuning:_timestamp_verification