hi,
For sip digest authentication, I assume its using following hash function.
H( H(A1) : nonce : H(A2) )
where A1 is username:realm:password
and A2 is method:uri
if no qop and algorithm is md5
But after testing with some implementations, it seems wrong.
For example the Registration procedure gets response with :
WWW-Authenticate = Digest realm="rd6.asus.com.tw",
nonce="0d1128f1806872deac4e01029b7c96b3"
stale=FALSE, algorithm=MD5
the retry is
Authorization = Digest username="[EMAIL PROTECTED]",
realm="rd6.asus.com.tw",
nonce="0d1128f1806872deac4e01029b7c96b3"
uri="rd6.asus.com.tw"
response="2923fb70ddfdf57f7ffe5cc436ab4889"
opaque=""
algorithm=MD5
But I cannot get the correct response field like this.
The password is 81
I am using
A1 = [EMAIL PROTECTED]:rd6.asus.com.tw:81
A2 = REGISTER:"rd6.asus.com.tw"
and get response = 1cfb5cb73cbbca92c3c47885411ae31b
if I use
A2 = REGISTER:rd6.asus.com.tw
I get response = 076de3a6c988cdda2519ace90a9448f9
I seems both of them are incorrect.
Did I miss anything?
Regards
Steven
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
