It's not what you think...part of the 401 unauthorized attempt is that it sends back a nonce key that you use to encrypt your password. That way, SIP has built-in protection against replay attacks even over unencrypted connections.
(If someone is watching though, they can try to brute force your passwords based on the nonce key...)
-Avi
On Sun, Jul 29, 2012 at 8:05 PM, Mi Ke
<mi.ke@null.net> wrote:
Hi All,
I use the following bridge params to originate call:
{sip_auth_username=xxx,sip_auth_password=yyy,effective_caller_id_name=xxx,effective_caller_id_number=xxx}sofia/external/1111@1.1.1.1
Since my remote carrier supports only digest authentication, it replies with 401 (Unauthorized) for my first INVITE, and then FS falls back to digest auth and my calls goes OK.
Is it possible to change auth type priority for sip profile/globally so digest auth will be used first or disable plain auth completely ?
WBR / Mike
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org