SonicOS/X API Reference Guide

Table of Contents

Nonce Resetting

RFC-7617 allows for multiple requests to use the same nonce (with a sequentially updating nonce count) through session, but it also provides a mechanism for the server to periodically (or whenever it chooses) generate a new random nonce, returning it to the client via a nextnonce field in an Authentication-Info header in the response to a request. After receiving a response with that, the client must then use it for the next request (resetting the nonce count to 1 for that request).

There is a Maximum nonce use configuration option to set the number of requests after which a new nonce is generated. Setting this to zero causes the same nonce to be used through the entire session.