Client connecting to endpoint with security_mode Basic128Rsa15 expects nonce length 16, errors out at length 32

[laumann]

We've run into this (sorry for screenshot, and not text):

I'm trying to figure this out: Is it correct by the standard to use 32 length nonces for security_mode Basic128Rsa15? If so, then there's a fix to be made in the client code - otherwise the server we're connecting to needs a fix (or some other workaround).