[OpenSER-Devel] nonce errors in trunk

Bogdan-Andrei Iancu bogdan at voice-system.ro
Fri Jun 6 18:34:19 CEST 2008


It will be changed to DBG - the same as the log for stale nonce .

Regards,
Bogdan

Ovidiu Sas wrote:
> hmm ... even WARNING may be to noisy on a loaded server ...
> Also, can we merge the two probes into a single one?
>
>
> On Fri, Jun 6, 2008 at 11:53 AM, Juha Heinanen <jh at tutpro.com> wrote:
>   
>> Bogdan-Andrei Iancu writes:
>>
>>  > I'm not saying that re-using the nonce is against RFC and that the phone
>>  > is broken  - I'm saying it is a security issue (stolen credentials) and
>>  > rejecting such auth requests does not break anything.
>>
>> in that case i would say that ERROR level messages should be downgraded
>> to warning or notice, because there is no error.
>>
>> -- juha
>>
>> _______________________________________________
>> Devel mailing list
>> Devel at lists.openser.org
>> http://lists.openser.org/cgi-bin/mailman/listinfo/devel
>>
>>     
>
>   




More information about the Devel mailing list