Hello, I'm wondering if ims_auth is tested with actual SIM-card/AKAv1-MD5 authentication? Bit concerned with that since as per authorize.c source code can see for AUTH_AKAV1_MD5/AUTH_AKAV2_MD5/AUTH_MD5 response is counted in the same way, though algorithms are different. -- obelousov.tel
Hi Oleg,
Yes the S-CSCF implementaiton of AKAv1-MD5 works with an actual SIM card for a first registration. For Re-registration I am not 100% sure it works because it receives a previous nonce and the response is calculated over the new message, apparently there is a configuration parameter max_nonce_reuse which is relevant in this case. Also the resynchronization I haven't tested with a real SIM card.
Best regards
alberto
El 14/10/2022 a las 13:52, Oleg Belousov escribió:
Hello, I'm wondering if ims_auth is tested with actual SIM-card/AKAv1-MD5 authentication? Bit concerned with that since as per authorize.c source code can see for AUTH_AKAV1_MD5/AUTH_AKAV2_MD5/AUTH_MD5 response is counted in the same way, though algorithms are different. -- obelousov.tel http://obelousov.tel
Kamailio - Users Mailing List - Non Commercial Discussions sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Thank you Alberto, for the confirmation. Will update if I have resynchronization test results. -- obelousov.tel
On Mon, Oct 24, 2022 at 9:05 AM Alberto Diez alberto-lists@mobileplots.com wrote:
Hi Oleg,
Yes the S-CSCF implementaiton of AKAv1-MD5 works with an actual SIM card for a first registration. For Re-registration I am not 100% sure it works because it receives a previous nonce and the response is calculated over the new message, apparently there is a configuration parameter max_nonce_reuse which is relevant in this case. Also the resynchronization I haven't tested with a real SIM card. Best regards
alberto El 14/10/2022 a las 13:52, Oleg Belousov escribió:
Hello, I'm wondering if ims_auth is tested with actual SIM-card/AKAv1-MD5 authentication? Bit concerned with that since as per authorize.c source code can see for AUTH_AKAV1_MD5/AUTH_AKAV2_MD5/AUTH_MD5 response is counted in the same way, though algorithms are different. -- obelousov.tel
Kamailio - Users Mailing List - Non Commercial Discussionssr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio - Users Mailing List - Non Commercial Discussions sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-
Alberto Diez -
Oleg Belousov