If either of wsu:Created and wsu:Expires are absent in the received timestamp, WSS4R crashes:
ArgumentError: comparison of Time with nil failed
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/xml/timestamp.rb:37:in `<='
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/xml/timestamp.rb:37:in `verify'
from /home/ubuntu/p4/cnuapp/bug/5717/vendor/gems/wss4r-0.5/lib/wss4r/security/xml/security.rb:30:in `unprocess'
The standard sez (http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0.pdf):
1316 /wsu:Timestamp/wsu:Created
1317 This represents the creation time of the security semantics. This element is optional, but
1318 can only be specified once in a <wsu:Timestamp> element.
1322 /wsu:Timestamp/wsu:Expires
1323 This element represents the expiration of the security semantics. This is optional, but
1324 can appear at most once in a <wsu:Timestamp> element. |