Skip to content

Latest commit

 

History

History
45 lines (29 loc) · 1.53 KB

sip-auth-process.md

File metadata and controls

45 lines (29 loc) · 1.53 KB

SIP Authentication Process

Overview

You can use wireshark to capture the SIP packets and analyze the SIP authentication process. The following is the SIP authentication process:

  1. The SIP client sends a SIP REGISTER request to the SIP server:

ws-init-register

  1. The SIP server sends a 401 Unauthorized response to the SIP client:

ws-register-denied

  1. The SIP client sends a new REGISTER request with the Authorization header:

ws-register-with-pw

The Digest Authentication Response is the SHA-256 hash of the username, realm, and password. For example, if the username is bob, the realm is localhost, and the password is 1234, the Digest Authentication Response is SHA-256(bob:localhost:1234).

  1. The SIP server sends a 200 OK response to the SIP client:

ws-register-ok

Other responses:

ws-domain-forbidden

  • 401 Unauthorized:
    • Domain is not configured for reg-domains in the ubuntu23-10/flexisip_conf/flexisip.conf file.
    • Hash algorithm is not supported by the softphone.
    • The Authorization header is missing in the REGISTER request.
    • Wrong password in the Authorization header.