Re: [SR-Users] SECSIPID Identity Decode

Can you doublecheck msg_apply_changes() is executed?

What version are you using?

Cheers, Daniel

On 02.07.21 08:58, Daniel W. Graham wrote:

I don’t see any issues in the log.

The identity header is being sent but still nothing in $mb

Daniel W. Graham, CTO

CMSInter.net LLC

DIRECT (989) 400-4230

INTERNET | TELEPHONE | MANAGED IT

*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode

Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.

Cheers, Daniel

On 02.07.21 08:19, Daniel W. Graham wrote:

Identity is not in $mb.

 

Daniel W. Graham, CTO

CMSInter.net LLC

DIRECT (989) 400-4230

 

INTERNET | TELEPHONE | MANAGED IT

 

 

*From: *"miconda@gmail.com" <mailto:miconda@gmail.com>
<miconda@gmail.com> <mailto:miconda@gmail.com>
*Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com>
<miconda@gmail.com> <mailto:miconda@gmail.com>
*Date: *Friday, July 2, 2021 at 2:09 AM
*To: *"Kamailio (SER) - Users Mailing List"
<sr-users@lists.kamailio.org>
<mailto:sr-users@lists.kamailio.org>, Daniel Graham
<dan@cmsinter.net> <mailto:dan@cmsinter.net>
*Subject: *Re: [SR-Users] SECSIPID Identity Decode

 

Hello,

try to print $mb after secsipid_add_identity() and
msg_apply_changes(), is the Identity header there?

Cheers,
Daniel

On 02.07.21 07:53, Daniel W. Graham wrote:

    I need to immediately get the uuid created by
    secsipid_add_identity().

     

    Is there a way to immediately read a header after its added?

     

    I tried msg_apply_changes() but $hdr(Identity) is null.

     

    -dan

     

     

    *From: *sr-users <sr-users-bounces@lists.kamailio.org>
    <mailto:sr-users-bounces@lists.kamailio.org> on behalf of
    Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net>
    *Reply-To: *"Kamailio (SER) - Users Mailing List"
    <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>
    *Date: *Thursday, July 1, 2021 at 6:11 PM
    *To: *"Kamailio (SER) - Users Mailing List"
    <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>
    *Subject: *Re: [SR-Users] SECSIPID Identity Decode

     

    Confirmed it was due to the sngrep copy. Thanks for mentioning it!

     

    -dan

     

     

    *From: *sr-users <sr-users-bounces@lists.kamailio.org>
    <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben
    Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com>
    *Reply-To: *"Kamailio (SER) - Users Mailing List"
    <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>
    *Date: *Thursday, July 1, 2021 at 12:49 PM
    *To: *"Kamailio (SER) - Users Mailing List"
    <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>
    *Subject: *Re: [SR-Users] SECSIPID Identity Decode

     

    Dump the header to your log file, and copy it from there.  I
    don’t know what happens with the ncurses in sngrep, but I
    finally looked them side by side and …. “Hey!  This one’s
    missing bytes!”

     

    *Ben Kaufman*

    /Sr. VoIP Engineer/


    P:

    E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>

    24 hour client support: 855.639.6300 <tel:+18556396300>


     

    *From:* sr-users <sr-users-bounces@lists.kamailio.org>
    <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of
    *Daniel W. Graham
    *Sent:* Thursday, July 1, 2021 10:25 AM
    *To:* Kamailio (SER) - Users Mailing List
    <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>
    *Subject:* Re: [SR-Users] SECSIPID Identity Decode

     

    Haha, yep :) I wondered if that was biting me.

     

    -dan







        On Jul 1, 2021, at 11:07 AM, Ben Kaufman
        <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>>
        wrote:

        I observed a similar behavior, but it was the result of my
        cutting and pasting the identity header from sngrep, which
        looks to have dropped a few bytes on the line break.  Any
        chance that’s what you’re doing, too?

         

        *Ben Kaufman*

        /Sr. VoIP Engineer/


        P:

        E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>

        24 hour client support: 855.639.6300 <tel:+18556396300>


         

        *From:* sr-users <sr-users-bounces@lists.kamailio.org
        <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf
        Of *Daniel W. Graham
        *Sent:* Wednesday, June 30, 2021 10:31 PM
        *To:* Kamailio (SER) - Users Mailing List
        <sr-users@lists.kamailio.org
        <mailto:sr-users@lists.kamailio.org>>; David Villasmil
        <david.villasmil.work@gmail.com
        <mailto:david.villasmil.work@gmail.com>>;
        Daniel-Constantin Mierla <miconda@gmail.com
        <mailto:miconda@gmail.com>>
        *Subject:* Re: [SR-Users] SECSIPID Identity Decode

         

        Here is an example, payload taken from Identity header.

         

        Identity was added with secsipid_add_identity

         

        Payload test:

        $var(test) =
        "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9";

        xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");

         

        Result is:

        {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�&#026Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'

         

        -dan

         

         

        *From: *sr-users <sr-users-bounces@lists.kamailio.org
        <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of
        Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>>
        *Reply-To: *"Kamailio (SER) - Users Mailing List"
        <sr-users@lists.kamailio.org
        <mailto:sr-users@lists.kamailio.org>>
        *Date: *Wednesday, June 30, 2021 at 5:32 PM
        *To: *David Villasmil <david.villasmil.work@gmail.com
        <mailto:david.villasmil.work@gmail.com>>,
        "miconda@gmail.com <mailto:miconda@gmail.com>"
        <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio
        (SER) - Users Mailing List" <sr-users@lists.kamailio.org
        <mailto:sr-users@lists.kamailio.org>>
        *Subject: *Re: [SR-Users] SECSIPID Identity Decode

         

        That’s the same way I am doing it, I was just trying to do
        a verification that the identity header/payload was
        correct before activating new changes.

         

        I will do further testing and share results. Just found it
        odd that the header would decode but payload wouldn’t.

         

        Daniel W. Graham, CTO

        CMSInter.net LLC

        DIRECT (989) 400-4230

         

        INTERNET | TELEPHONE | MANAGED IT

         

         

        *From: *David Villasmil <david.villasmil.work@gmail.com
        <mailto:david.villasmil.work@gmail.com>>
        *Date: *Wednesday, June 30, 2021 at 4:06 PM
        *To: *"miconda@gmail.com <mailto:miconda@gmail.com>"
        <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio
        (SER) - Users Mailing List" <sr-users@lists.kamailio.org
        <mailto:sr-users@lists.kamailio.org>>
        *Cc: *Daniel Graham <dan@cmsinter.net
        <mailto:dan@cmsinter.net>>
        *Subject: *Re: [SR-Users] SECSIPID Identity Decode

         

        I DO IT WITH:

         

        # Break JWT
                    $var(jwt1) =
        $(hdr(Identity){s.select,0,.}{s.decode.base64t});
                    $var(jwt2) =
        $(hdr(Identity){s.select,1,.}{s.decode.base64t});

         


        Regards,

         

        David Villasmil

        email: david.villasmil.work@gmail.com
        <mailto:david.villasmil.work@gmail.com>

        phone: +34669448337

         

         

        On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla
        <miconda@gmail.com <mailto:miconda@gmail.com>> wrote:

            Hello,

            not familiar with python functions, have you tried
            with Kamailio transformation?

            https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url
            <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url>

            Maybe you have to specify in Python that it is ASCII,
            I remember I had to do decoding when porting kamcli to
            work with Python3 -- had to change from using directly
            the variables received as parameter to a decoded
            value, something like:

            prefix = tprefix.encode("ascii", "ignore").decode()

            Also, if you can, share the identity header here to
            test with and see if can be reproduced.

            Cheers,
            Daniel

            On 30.06.21 21:14, Daniel W. Graham wrote:

                I am unable to base64url decode the json payload
                in identity header generated by secsipid.

                 

                (Using python for test)

                decoded_payload = url64.decode(‘payload’)

                UnicodeDecodeError: 'utf-8' codec can't decode
                byte 0xc2 in position 27: invalid continuation byte

                 

                Header decodes fine this way but not payload.

                 

                Is this an issue with the payload encoding?

                 

                Kamailio 5.5

                 

                Daniel W. Graham, CTO

                CMSInter.net LLC

                DIRECT (989) 400-4230

                 

                INTERNET | TELEPHONE | MANAGED IT

                 








                __________________________________________________________

                Kamailio - Users Mailing List - Non Commercial Discussions

                  * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>

                Important: keep the mailing list in the recipients, do not reply only to the sender!

                Edit mailing list options or unsubscribe:

                  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>

            -- 

            Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>

            www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>

            __________________________________________________________
            Kamailio - Users Mailing List - Non Commercial Discussions
              * sr-users@lists.kamailio.org
            <mailto:sr-users@lists.kamailio.org>
            Important: keep the mailing list in the recipients, do
            not reply only to the sender!
            Edit mailing list options or unsubscribe:
              *
            https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
            <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>

        __________________________________________________________
        Kamailio - Users Mailing List - Non Commercial Discussions
         * sr-users@lists.kamailio.org
        <mailto:sr-users@lists.kamailio.org>
        Important: keep the mailing list in the recipients, do not
        reply only to the sender!
        Edit mailing list options or unsubscribe:
         *
        https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
        <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>




    __________________________________________________________

    Kamailio - Users Mailing List - Non Commercial Discussions

      * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>

    Important: keep the mailing list in the recipients, do not reply only to the sender!

    Edit mailing list options or unsubscribe:

      * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>

-- 

Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>

www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>

-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda