[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Linphone-users] capitalization of MD5 in WWW-Authenticate, and linphone

From: Greg Troxel
Subject: [Linphone-users] capitalization of MD5 in WWW-Authenticate, and linphone's approach
Date: Tue, 26 Nov 2019 11:43:31 -0500
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (berkeley-unix)

I am setting up and Asterisk PBX and trying to register some softphones.
I'm using "auth_type=userpass" in Asterisk which results in MD5 digest.

Asterisk is sending

  WWW-Authenticate: Digest 

which I think is not quite right as MD5 should be upper case.  But it
seems surprising that Asterisk would have such a bug, leading me to
think I am missing something.

With Mac linphone desktop, registration succeeds normally (401 and then
a new REGISTER with authentication).

With Android linphone 4.1.1 (from f-droid), linphone does not respond to
the challenge.

If I disable authentication in Asterisk, Android linphone registers

With baresip-studio, I am able to register when authentication is
required.  (I am pretty sure that this used to fail, but perhaps I
mentioned this to the author.)


  Am I correct that "algorithm=md5" is wrong?   Or are these strings
  defined not to be case sensitive?

  It seems that Android linphone should treat it as MD5, as the desktop
  client seems to.

It seems this came up already and was fixed, but is perhaps broken again:


reply via email to

[Prev in Thread] Current Thread [Next in Thread]