try latest GIT On Fri, Feb 10, 2012 at 3:01 PM, Michael Collins <msc@freeswitch.org> wrote:
On Fri, Feb 10, 2012 at 12:50 PM, Phil Quesinberry <philq@qsystemsengineering.com> wrote:
Ok, here's part of the sip trace as requested. I won't have time to sanitize the whole thing until later but in the meantime, here's an interesting excerpt that I wanted to make a few comments on:
First, notice the "Unauthorized" response to the first registration attempt but the next attempt is successful. This has actually been going on as long as I can remember with this particular provider.
As far as the auth goes I believe it is required to have the registrar send out the 401 first because it contains a nonce that assists in keeping the communication relatively secure. If I could send a single REG and magically authenticate then that would make a SIP replay attack really easy.
If I understand all this correctly, the registrar sending a 401 "Unauthorized" does not mean, "Go away." Rather it means, "I'm not gonna let you in unless you give me the magic password. Here's a nonce to help you calculate the proper digest. I'm waiting for your next REGISTER message with the appropriate Authorization header."
I'll have to defer to those more experienced than I on the rest of the post.
-MC
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900