[prev in list] [next in list] [prev in thread] [next in thread] 

List:       serusers
Subject:    Re: [SR-Users] ims_auth with AKAv1-MD5
From:       Oleg Belousov <obelousov () gmail ! com>
Date:       2022-10-24 11:19:48
Message-ID: CAH-zrm+w6uDS4Uw5ykcL7vPAHrBb09qamFWwsdOeq+R_L8my0g () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Thank you Alberto, for the confirmation. Will update if I
have resynchronization test results.
--
obelousov.tel


On Mon, Oct 24, 2022 at 9:05 AM Alberto Diez <alberto-lists@mobileplots.com=
>
wrote:

> Hi Oleg,
>
> Yes the S-CSCF implementaiton of AKAv1-MD5 works with an actual SIM card
> for a first registration.  For Re-registration I am not 100% sure it work=
s
> because it receives a previous nonce and the response is calculated over
> the new message, apparently there is a configuration parameter
> max_nonce_reuse which is relevant in this case.  Also the resynchronizati=
on
> I haven't tested with a real SIM card.
> Best regards
>
> alberto
> El 14/10/2022 a las 13:52, Oleg Belousov escribi=C3=B3:
>
> Hello,
> I'm wondering if ims_auth is tested with actual SIM-card/AKAv1-MD5
> authentication? Bit concerned with that since as per authorize.c source
> code can see for AUTH_AKAV1_MD5/AUTH_AKAV2_MD5/AUTH_MD5 response is count=
ed
> in the same way, though algorithms are different.
> --
> obelousov.tel
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussionssr-users@lists.=
kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to =
the sender!
> Edit mailing list options or unsubscribe:https://lists.kamailio.org/cgi-b=
in/mailman/listinfo/sr-users
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
> sr-users@lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>

[Attachment #5 (text/html)]

<div dir="ltr">Thank you Alberto, for the confirmation. Will update if I have  \
resynchronization  test results.<br clear="all"><div><div dir="ltr" \
class="gmail_signature" data-smartmail="gmail_signature">--<br><a \
href="http://obelousov.tel" \
target="_blank">obelousov.tel</a></div></div><br></div><br><div \
class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Oct 24, 2022 at 9:05 AM \
Alberto Diez &lt;<a href="mailto:alberto-lists@mobileplots.com">alberto-lists@mobileplots.com</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">  
    
  
  <div>
    <p>Hi Oleg,</p>
    <p>Yes the S-CSCF implementaiton of AKAv1-MD5 works with an actual
      SIM card for a first registration.   For Re-registration I am not
      100% sure it works because it receives a previous nonce and the
      response is calculated over the new message, apparently there is a
      configuration parameter max_nonce_reuse which is relevant in this
      case.   Also the resynchronization I haven&#39;t tested with a real SIM
      card.</p>
    Best regards
    <p>alberto<br>
    </p>
    <div>El 14/10/2022 a las 13:52, Oleg
      Belousov escribió:<br>
    </div>
    <blockquote type="cite">
      
      <div dir="ltr">Hello,
        <div>I&#39;m wondering if ims_auth is tested with actual
          SIM-card/AKAv1-MD5 authentication? Bit concerned with that
          since as per authorize.c source code can see for
          AUTH_AKAV1_MD5/AUTH_AKAV2_MD5/AUTH_MD5 response is counted in
          the same way,  though  algorithms  are different.</div>
        <div>
          <div>
            <div dir="ltr">--<br>
              <a href="http://obelousov.tel" target="_blank">obelousov.tel</a></div>
          </div>
        </div>
      </div>
      <br>
      <fieldset></fieldset>
      <pre>__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
<a href="mailto:sr-users@lists.kamailio.org" \
                target="_blank">sr-users@lists.kamailio.org</a>
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" \
target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a> \
</pre>  </blockquote>
  </div>

__________________________________________________________<br>
Kamailio - Users Mailing List - Non Commercial Discussions<br>
<a href="mailto:sr-users@lists.kamailio.org" \
                target="_blank">sr-users@lists.kamailio.org</a><br>
Important: keep the mailing list in the recipients, do not reply only to the \
sender!<br> Edit mailing list options or unsubscribe:<br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" \
rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
 </blockquote></div>



__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


[prev in list] [next in list] [prev in thread] [next in thread]