linphone-developers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Linphone-developers] Linphone reusing stale nonce


From: Robert Dyck
Subject: [Linphone-developers] Linphone reusing stale nonce
Date: Mon, 08 Jan 2018 10:20:25 -0800

Using Linphone on a desktop - Desktop 4.1.1-171-g069b4db3 - Qt5.9.2 - Core 3.12.0-244-g373391366

 

Linphone registers fine initially but fails to refresh if a strict registrar/proxy will not allow stale nonce reuse. Permissive registrars will allow a stale nonce if the digest is correct. I checked the math myself and the digest is correct. As a result Linphone will work with some registrars and not with others.

 

Packets displayed below show nonce reused.

 

Session Initiation Protocol (REGISTER)
   Request-Line: REGISTER sip:192.168.1.2 SIP/2.0
   Message Header
       Via: SIP/2.0/UDP 192.168.1.3:5060;branch=z9hG4bK.VdDYSjl2B;rport
       From: "Rob's computer" <sip:address@hidden>;tag=dFtYICOGX
       To: "Rob's computer" <sip:address@hidden>
       CSeq: 65 REGISTER
       Call-ID: 2C~QqETg5b
       Max-Forwards: 70
       Supported: replaces, outbound
       Accept: application/sdp
       Accept: text/plain
       Accept: application/vnd.gsma.rcs-ft-http+xml
       Contact: <sip:address@hidden;transport=udp>;+sip.instance="<urn:uuid:eae2dc6a-0aae-405d-9ae9-86aa3f6cd468>"

       Expires: 3600
       User-Agent: Linphone Desktop/4.1.1-171-g069b4db3 (belle-sip/1.6.3)
       Authorization:  Digest realm="192.168.1.2",
nonce="5a52bba300002dab907ac4aa8be27334bf19bba36f68534c", username="2",  uri="sip:192.168.1.2", response="8b9ff4aead30b249a8764e5d8be73
acb"

   Status-Line: SIP/2.0 401 Unauthorized
   Message Header
       Via: SIP/2.0/UDP 192.168.1.3:5060;received=192.168.1.3;branch=z9hG4bK.VdDYSjl2B;rport=5060
       From: "Rob's computer" <sip:address@hidden>;tag=dFtYICOGX
       To: "Rob's computer" <sip:address@hidden>;tag=c97b4d1cb1f3d0da549e06a8d482ef63.c256
       CSeq: 65 REGISTER
       Call-ID: 2C~QqETg5b
       WWW-Authenticate: Digest realm="192.168.1.2",
nonce="5a52d845986bf366342daf4b89edcea5b4c7eb58", stale=true
       Server: OpenSIPS (2.3.2 (x86_64/linux))
       Content-Length: 0

       User-Agent: Linphone Desktop/4.1.1-171-g069b4db3 (belle-sip/1.6.3)
       Authorization:  Digest realm="192.168.1.2", nonce="5a52bba300002dab907ac4aa8be27334bf19bba36f68534c", username="2",  uri="sip:192.168.1.2", response="8b9ff4aead30b249a8764e5d8be73
acb"

Session Initiation Protocol (REGISTER)
   Request-Line: REGISTER sip:192.168.1.2 SIP/2.0
   Message Header
       Via: SIP/2.0/UDP 192.168.1.3:5060;branch=z9hG4bK.VdDYSjl2B;rport
       From: "Rob's computer" <sip:address@hidden>;tag=dFtYICOGX
       To: "Rob's computer" <sip:address@hidden>
       CSeq: 65 REGISTER
       Call-ID: 2C~QqETg5b
       Max-Forwards: 70
       Supported: replaces, outbound
       Accept: application/sdp
       Accept: text/plain
       Accept: application/vnd.gsma.rcs-ft-http+xml
       Contact: <sip:address@hidden;transport=udp>;+sip.instance="<urn:uuid:eae2dc6a-0aae-405d-9ae9-86aa3f6cd468>"
       Expires: 3600
       User-Agent: Linphone Desktop/4.1.1-171-g069b4db3 (belle-sip/1.6.3)
       Authorization:  Digest realm="192.168.1.2",
nonce="5a52bba300002dab907ac4aa8be27334bf19bba36f68534c", username="2",  uri="sip:192.168.1.2", response="8b9ff4aead30b249a8764e5d8be73
acb"

 


reply via email to

[Prev in Thread] Current Thread [Next in Thread]