[Freeswitch-users] how to force sofia to use digest auth first?

[Mi Ke]

I see... thank you very much for explaining


----- Original Message -----
From: Avi Marcus
Sent: 07/29/12 08:39 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] how to force sofia to use digest auth first?

 It's not what you think... 
 part of the 401 unauthorized attempt is that it sends back a nonce key that you use to encrypt your password. That way, SIP has built-in protection against replay attacks even over unencrypted connections.
 (If someone is watching though, they can try to brute force your passwords based on the nonce key...)

-Avi


 On Sun, Jul 29, 2012 at 8:05 PM, Mi Ke < mi.ke at null.net > wrote:
Hi All,

 I use the following bridge params to originate call:

 {sip_auth_username=xxx,sip_auth_password=yyy,effective_caller_id_name=xxx,effective_caller_id_number=xxx}sofia/external/ 1111 at 1.1.1.1 

 Since my remote carrier supports only digest authentication, it replies with 401 (Unauthorized) for my first INVITE, and then FS falls back to digest auth and my calls goes OK.

 Is it possible to change auth type priority for sip profile/globally so digest auth will be used first or disable plain auth completely ?

 WBR / Mike


 _________________________________________________________________________
 Professional FreeSWITCH Consulting Services:
 consulting at freeswitch.org 
http://www.freeswitchsolutions.com 

 
 

 Official FreeSWITCH Sites
http://www.freeswitch.org 
http://wiki.freeswitch.org 
http://www.cluecon.com 

 Join Us At ClueCon - Aug 7-9, 2012

 FreeSWITCH-users mailing list
 FreeSWITCH-users at lists.freeswitch.org 
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users 
 UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users 
http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120729/41793afe/attachment.html