Hi Jerome,
you are right - a server may change the expire advertised by the
client. If it is the case or not, it's a matter of configuration in
OpenSER - see the min_expires and max_expires in the registrar module.
if this params are not set, there is no risk of using the value
advertised by the client.
regards,
bogdan
Jerome Martin wrote:
On Thu, 2006-12-14 at 17:32 -0200, Juan Carlos
Castro y Castro wrote:
Forget I said that! There's $Ts +
$hdr("Expires")! That'll teach me
to always RTFA before answering!
Well, you need to be carefull about $hdr("Expires"). This is NOT the
only way a UA can specify an expiration delay for a REGISTER request.
If you take a look at the relevant parts of rfc3261
(
http://www.ietf.org/rfc/rfc3261.txt ), you'll see that using an
Expires header is only one way of specifying a desired expired duration
for the REGISTER. The other way is by using a Contact header parameter
(page 60 of the rfc) :
10.2.1.1 Setting the Expiration Interval of
Contact Addresses
When a client sends a REGISTER request, it MAY suggest an expiration
interval that indicates how long the client would like the
registration to be valid. (As described in Section 10.3, the
registrar selects the actual time interval based on its local
policy.)
There are two ways in which a client can suggest an expiration
interval for a binding: through an Expires header field or an
"expires" Contact header parameter. The latter allows expiration
intervals to be suggested on a per-binding basis when more than one
binding is given in a single REGISTER request, whereas the former
suggests an expiration interval for all Contact header field values
that do not contain the "expires" parameter.
Also note that the expire parameter to a Contact header is totally
case-unsensitive ( page 32 of the RFC) :
When comparing header fields, field names are
always case-
insensitive. Unless otherwise stated in the definition of a
particular header field, field values, parameter names, and
parameter
values are case-insensitive. Tokens are always case-insensitive.
Unless specified otherwise, values expressed as quoted strings are
case-sensitive. For example,
Contact: <sip:alice@atlanta.com>;expires=3600
is equivalent to
CONTACT: <sip:alice@atlanta.com>;ExPiReS=3600
A good example of a very popular SIP UA always using the Contact
header parameter method is the Linksys PAP2 ATA. On the other hand,
there are also
many popular ATAs that use the Expires header method, i.e.
Audiocodes MP1XX ATAs. So unless you're in a very controlled
environment and you don't
care at all to be generic and RFC3261-compliant, you must support
both. But
be carefull, in my experience this almost always bites you back one
day or the other.
Hope this helps,
Best Regards,
Jérôme Martin