there is no "exchange" as such.
Just that both proxy and UA have been independently configured with the same
password.
Regarding a sort of exchange: There is a nonce sent back by the 407 which is
then used in a hashing function
with the password. Since both ends know the password and the nonce, they
should both calculate the same "response".
response = "response" "=" request-digest
See RFC 2617 - sections 3.2.2.1 to 3.2.2.5 on how to calculate the response.
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Couret Tabt
Sent: 11 February 2010 14:41
To: [email protected]
Subject: Re: [Sip-implementors] Proxy Authenticate in RFC3261
Thank you, Castillo.
Sorry, I did not explain enough.
I mean below:
Reading RFC2617,
I think below:
In SIP,
UAC -- P1 -- P2 --...--Pn--UAS
If any Proxy(i.e.Px) hope that it would send back 407 to UAC, the Px MUST have
already exchanged a shared secret key with UAC before.
Am I right?
2010/2/11 Iñaki Baz Castillo <[email protected]>:
> El Jueves, 11 de Febrero de 2010, Couret Tabt escribió:
>> Dear folks,
>>
>> I am a beginner and so I might post trivial questions.
>> Then I am sorry.
>> I have great appreciation for your usual kind help.
>> Thank you.
>>
>> By the way,
>> for Proxy Authenticate in RFC3261,
>> do a UAC and a Proxy, in advance, have to exchange a shared secret
>> key each other?
>> In other words,
>> Can't the Proxy(that have NOT exchanged a shared secret key with a
>> UAC yet
>> ) authenticate the UAC(or send back 407)?
>>
>> Oppositely,
>> Can any proxies that have already exchanged a shared secret key with
>> a UAC authenticate the UAC(or send back 407)?
>
> Digest authentication is full explained in RFC 2617.
>
> --
> Iñaki Baz Castillo <[email protected]>
>
> _______________________________________________
> Sip-implementors mailing list
> [email protected]
> https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
>
_______________________________________________
Sip-implementors mailing list
[email protected]
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
_______________________________________________
Sip-implementors mailing list
[email protected]
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
