RFC Errata Report » RFC Editor (original) (raw)

RFC 5766, "Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN)", April 2010

Note: This RFC has been obsoleted by RFC 8656

Note: This RFC has been updated by RFC 8155, RFC 8553

Source of RFC: behave (tsv)
See Also: RFC 5766 w/ inline errata


Errata ID: 5231
Status: Verified Type: Technical Publication Format(s) : TEXT
Reported By: Hannes Landeholm
Date Reported: 2018-01-09
Verifier Name: Spencer Dawkins
Date Verified: 2018-01-09

Section 16 says:

|<-- Refresh success response -------|             |             |
|    Transaction-Id=0x427BD3E625A85FC731DC4191     |             |
|    SOFTWARE="Example server, version 1.17"       |             |
|    LIFETIME=600 (10 minutes)       |             |             |

It should say:

|<-- Refresh success response -------|             |             |
|    Transaction-Id=0x427BD3E625A85FC731DC4191     |             |
|    SOFTWARE="Example server, version 1.17"       |             |
|    LIFETIME=600 (10 minutes)       |             |             |
|    MESSAGE-INTEGRITY=...           |             |             |

Notes:

The last example refresh success response lacks message-integrity, incorrectly implying that the response after a stale nonce exchange does not have to be authenticated.

Report New Errata