[OpenSIPS-Users] Registrations, Retransmissions and Nonces

Bogdan-Andrei Iancu bogdan at voice-system.ro
Wed Nov 3 13:45:06 CET 2010


Hi Kennard

Kennard White wrote:

[....]
> Opensips has two mechanisms for making a nonce stale: the time-based 
> mechanism (nonce_expire) and a use-once mechanism 
> ('disable_nonce_check"). The 2nd mechanism doesn't set the stale=1 
> flag. Not sure why, but I think maybe because authors assume that if 
> this happened it was a malicious attack, not a retransmission. 
[....]

actually that was a bug - the STALE indicator was report to the script, 
but not included in the challenge ....It is fixed now.

Thanks and regards,
Bodgan

-- 
Bogdan-Andrei Iancu
OpenSIPS Bootcamp
15 - 19 November 2010, Edison, New Jersey, USA
www.voice-system.ro




More information about the Users mailing list