[Freeswitch-users] Authentication and registration question

[Steven Ayre]

Hashes are a one-way function. There is no way to 'unhash' a hashed string
- that goes for MD5 and every other hash function.

FreeSWITCH will calculate the hash from the plaintext password and then
compare that hash to the one sent by the user.

See http://en.wikipedia.org/wiki/Digest_access_authentication for an
explanation of the process.

-Steve



On 26 June 2013 11:38, Peter Stevens <Peter.Stevens at bbc.co.uk> wrote:

>   I have been asked the following question:****
>
> ** **
>
> If the password negotiation uses digest authentication with a MD5 hash –
> is this compared with a one time hash in the passwords.xml or does some
> other process take place to unhash this to compare with the actual password?
> ****
>
> ** **
>
> I had a look in sofia_reg.c but didn’t see anything obvious and the forum
> list didn’t show anything on this subject.****
>
> ** **
>
> Thanks for any help on this.****
>
> ** **
>
> Best regards,****
>
> ** **
>
> Peter Stevens****
>
> ** **
>
> ** **
>
>
>
> ----------------------------
>
> http://www.bbc.co.uk
> This e-mail (and any attachments) is confidential and may contain personal
> views which are not the views of the BBC unless specifically stated.
> If you have received it in error, please delete it from your system.
> Do not use, copy or disclose the information in any way nor act in
> reliance on it and notify the sender immediately.
> Please note that the BBC monitors e-mails sent or received.
> Further communication will signify your consent to this.
>
> ---------------------
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130626/9c21980a/attachment.html