Re: [Linphone-users] How to calculate HA1?!

[Robert Dyck]

Here is an example using the command line.

Given user 2@192.168.1.2 with password huh

 

Hash 1

[rdyck@blacky ~]$ echo -n "2:192.168.1.2:huh" | md5sum
dce1ddb931719bf0f9ebfbf3d7e88d77

Completing the authorization requires two more hashes.

 

Hash 2
echo -n "REGISTER:sip:192.168.1.2" | md5sum
e2cdec7afb0cc21674cceb668555438b

Hash 3 uses the previous hashes and the nonce - HA1:nonce:HA2

[rdyck@blacky ~]$ echo -n "dce1ddb931719bf0f9ebfbf3d7e88d77:5e7653cb00001dc2090a257e1725869dd3ad5f2a0c5426b0:e2cdec7afb0cc21674cceb668555438b" | md5sum
847caaf31fe4c371b1cacea53de87253 - this would be the response to an authorization request.

 

An actual registration - verify the response hash

 

Session Initiation Protocol (REGISTER)
   Request-Line: REGISTER sip:192.168.1.2 SIP/2.0
   Message Header
       Via: SIP/2.0/UDP 192.168.1.3:53845;branch=z9hG4bKe6b621d8a65eb39e;rport
       Contact: <sip:2-0x23a8e80@192.168.1.3:53845>;expires=3840;+sip.instance="<urn:uuid:827173ac-5761-2b65-4493-94ca86baf98a>"
       Max-Forwards: 70
       Authorization: Digest username="2", realm="192.168.1.2", nonce="5e7653cb00001dc2090a257e1725869dd3ad5f2a0c5426b0", uri="sip:192.168.1.2", response="847caaf31fe4c371b1cacea53de87253"
       To: <sip:2@192.168.1.2>
       From: <sip:2@192.168.1.2>;tag=dadb5f2f513c33a3
       Call-ID: 0b5e6ca4907cdebf
       [Generated Call-ID: 0b5e6ca4907cdebf]
       CSeq: 29774 REGISTER
       User-Agent: baresip v0.6.5 (x86_64/linux)
       Allow:INVITE,ACK,BYE,CANCEL,OPTIONS,NOTIFY,SUBSCRIBE,INFO,MESSAGE,REFER
       Content-Length: 0

 

On Saturday, March 21, 2020 9:52:34 A.M. PDT Sean M. Pappalardo wrote:

> Hello.

>

> I'm trying to prepare XML config files for my clients and want to use

> hashes instead of passwords. How does linphone calculate the hashes it

> stores in the config file? This should be in the wiki.

>

> I've looked at the source code for liblinphone but all I can find is

> reference to a function called belle_sip_auth_helper_compute_ha1 which

> isn't actually defined in the source, so where is it??

>

> Sincerely,

> Sean M. Pappalardo

> Sr. Networks Engineer

> Renegade Technologies

> address@hidden

> Office: (630) 631-6188

> http://www.renegadetech.com

>

> --

> This communication, along with any documents, files or attachments, is

> intended only for the use of the addressee and may contain confidential

> information. If you are not the intended recipient, you are hereby

> notified that any dissemination, distribution or copying of any

> information contained in or attached to this communication is strictly

> prohibited.

> If you have received this message in error, please notify the sender

> immediately and destroy the original communication and its attachments

> without reading, printing or saving in any manner.