Hashes are a one-way function. There is no way to 'unhash' a hashed string - that goes for MD5 and every other hash function. FreeSWITCH will calculate the hash from the plaintext password and then compare that hash to the one sent by the user. See http://en.wikipedia.org/wiki/Digest_access_authentication for an explanation of the process. -Steve On 26 June 2013 11:38, Peter Stevens <Peter.Stevens@bbc.co.uk> wrote:
I have been asked the following question:****
** **
If the password negotiation uses digest authentication with a MD5 hash – is this compared with a one time hash in the passwords.xml or does some other process take place to unhash this to compare with the actual password? ****
** **
I had a look in sofia_reg.c but didn’t see anything obvious and the forum list didn’t show anything on this subject.****
** **
Thanks for any help on this.****
** **
Best regards,****
** **
Peter Stevens****
** **
** **
----------------------------
http://www.bbc.co.uk This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this.
---------------------
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org