[OpenSIPS-Users] stir_shaken date header discrepancy

[Liviu Chircu]

Hi James,

Make sure you're running a recent OpenSIPS build, I recall this bug was 
caught a few months ago 
<https://github.com/OpenSIPS/opensips/commit/75a168a9f43>.

Best regards,

Liviu Chircu
www.twitter.com/liviuchircu  |www.opensips-solutions.com
OpenSIPS Summit 2024 Valencia, May 14-17 |www.opensips.org/events

On 20.02.2024 15:03, James Seer wrote:
> Hello,
>
> I have a question regarding Date Header Verification in our setup:
>
> Server Timezone: Central European Time
> Configuration:
> require_date_hdr: false
> verify_date_freshness : 300 seconds
> SIP INVITE Date Header: Tue, 20 Feb 2024 00:26:05 GMT
> Server time: 2024-02-20T00:26:06 CET
> Identity header payload "iat" value: 1708385165
>
> Despite the Date header being in the future, OpenSIPS proceeded with 
> verification. While I can see there's an existing error code (-6: Date 
> header value is older than local policy for freshness), it only 
> addresses cases where the header is "older" than the local policy.
>
> This could be easily handled in script code, but shouldn't opensips 
> trigger a distinct failure with a new error code, considering the 
> discrepancy between the Date header and server time ? (More than 300 
> seconds of difference)
>
> Thank you
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20240220/9400bebd/attachment.html>