I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel
On 30.06.21 21:14, Daniel W. Graham wrote:
I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test)
decoded_payload = url64.decode(‘payload’)
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla miconda@gmail.com wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote:
I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test)
decoded_payload = url64.decode(‘payload’)
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
-- Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil david.villasmil.work@gmail.com Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.com" miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Cc: Daniel Graham dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil david.villasmil.work@gmail.com, "miconda@gmail.com" miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil david.villasmil.work@gmail.com Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.com" miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Cc: Daniel Graham dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Maybe the parameters provided to generate the header have some invalid values. Can you give the relevant config snippets for generating the header?
Cheers, Daniel
On 01.07.21 05:31, Daniel W. Graham wrote:
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test:
$var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9";
xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is:
{"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
*From: *sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net *Reply-To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil david.villasmil.work@gmail.com, "miconda@gmail.com" miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
*From: *David Villasmil david.villasmil.work@gmail.com *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com" miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Cc: *Daniel Graham dan@cmsinter.net *Subject: *Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil
email: david.villasmil.work@gmail.com mailto:david.villasmil.work@gmail.com
phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com mailto:miconda@gmail.com> wrote:
Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
fU and rU are 10 digit numbers. My public key path is 81 characters long, could that be an issue?
if (!secsipid_add_identity("$fU", "$rU", "A", "","https://publickeypath.crt%22,%22/privatekeypath/shaken.pem") {
…
}
-dan
On Jul 1, 2021, at 2:37 AM, Daniel-Constantin Mierla miconda@gmail.com wrote:
Maybe the parameters provided to generate the header have some invalid values. Can you give the relevant config snippets for generating the header?
Cheers, Daniel
On 01.07.21 05:31, Daniel W. Graham wrote: Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com, "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Cc: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org; David Villasmil david.villasmil.work@gmail.com; Daniel-Constantin Mierla miconda@gmail.com Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman bkaufman@nexvortex.com wrote:
I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org; David Villasmil david.villasmil.work@gmail.com; Daniel-Constantin Mierla miconda@gmail.com Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel
On 02.07.21 07:53, Daniel W. Graham wrote:
I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
*From: *sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net *Reply-To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
*From: *sr-users sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.com *Reply-To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
*Ben Kaufman*
/Sr. VoIP Engineer/
P:
E: bkaufman@nexvortex.com mailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300 tel:+18556396300
*From:* sr-users sr-users-bounces@lists.kamailio.org *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Subject:* Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com" miconda@gmail.com Reply-To: "miconda@gmail.com" miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel
On 02.07.21 08:19, Daniel W. Graham wrote:
Identity is not in $mb.
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.net *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel
On 02.07.21 07:53, Daniel W. Graham wrote:
I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com" miconda@gmail.com Reply-To: "miconda@gmail.com" miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel
On 02.07.21 08:58, Daniel W. Graham wrote:
I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel
On 02.07.21 08:19, Daniel W. Graham wrote:
Identity is not in $mb. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>, Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel
On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
-- Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel
On 02.07.21 15:10, Daniel W. Graham wrote:
Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel
On 02.07.21 08:58, Daniel W. Graham wrote:
I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel
On 02.07.21 08:19, Daniel W. Graham wrote:
Identity is not in $mb. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>, Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
-- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda
Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.
I just changed to this and receive “Failed to apply changes”.
if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); }
-dan
From: "miconda@gmail.com" miconda@gmail.com Reply-To: "miconda@gmail.com" miconda@gmail.com Date: Friday, July 2, 2021 at 9:24 AM To: Daniel Graham dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.commailto:miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any?
Cheers, Daniel
On 02.07.21 18:18, Daniel W. Graham wrote:
Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.
I just changed to this and receive “Failed to apply changes”.
if (!msg_apply_changes()) {
xlogl("L_WARN", "Failed to apply changes\n");
}
-dan
*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 9:24 AM *To: *Daniel Graham dan@cmsinter.net *Cc: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel
On 02.07.21 15:10, Daniel W. Graham wrote:
Its not being executed. Version 5.5 Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla <miconda@gmail.com> <mailto:miconda@gmail.com> wrote: Can you doublecheck msg_apply_changes() is executed? What version are you using? Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log. The identity header is being sent but still nothing in $mb Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs. Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>, Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
I checked twice but nothing. I will test again in case I am missing something, I found it odd too that its failing but no error in debug.
I tried adding another header and msg_apply_changes() before the call to secsipid_add_identity(), and that doesnt show up in $mb or accessible by $hdr() either.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com" miconda@gmail.com Reply-To: "miconda@gmail.com" miconda@gmail.com Date: Friday, July 2, 2021 at 1:46 PM To: Daniel Graham dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any?
Cheers, Daniel On 02.07.21 18:18, Daniel W. Graham wrote: Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.
I just changed to this and receive “Failed to apply changes”.
if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); }
-dan
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 9:24 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.commailto:miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
Found it. record_route bit me.
ERROR: <core> [core/msg_translator.c:3355]: sip_msg_apply_changes(): cannot apply msg changes after adding record-route header - it breaks conditional 2nd header
Assuming not but thought I’d ask, any way to access a header before its added to the message?
Future request, that secsipid_add_identity() returns the auto generated uuid for origid.
-dan
From: sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Date: Friday, July 2, 2021 at 1:54 PM To: "miconda@gmail.com" miconda@gmail.com Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
I checked twice but nothing. I will test again in case I am missing something, I found it odd too that its failing but no error in debug.
I tried adding another header and msg_apply_changes() before the call to secsipid_add_identity(), and that doesnt show up in $mb or accessible by $hdr() either.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com" miconda@gmail.com Reply-To: "miconda@gmail.com" miconda@gmail.com Date: Friday, July 2, 2021 at 1:46 PM To: Daniel Graham dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any?
Cheers, Daniel On 02.07.21 18:18, Daniel W. Graham wrote: Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.
I just changed to this and receive “Failed to apply changes”.
if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); }
-dan
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 9:24 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.commailto:miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman
Sr. VoIP Engineer
P:
E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
Hello,
On 02.07.21 22:40, Daniel W. Graham wrote:
Found it. record_route bit me.
ERROR: <core> [core/msg_translator.c:3355]: sip_msg_apply_changes(): cannot apply msg changes after adding record-route header - it breaks conditional 2nd header
Assuming not but thought I’d ask, any way to access a header before its added to the message?
the devel version has a function that stores the result in a variable and then can be added to the headers via append_hf():
* https://www.kamailio.org/docs/modules/devel/modules/secsipid.html#secsipid.f...
Future request, that secsipid_add_identity() returns the auto generated uuid for origid.
An option would be to add it the variable $secsipid(...) for convenience.
Right now you can parse the result with transformations and jannson/json modules to extract the origid field.
Or use the uuid module to generate the origid yourself in kamailio.cfg and provided as parameter.
Cheers, Daniel
-dan
*From: *sr-users sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.net *Reply-To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Date: *Friday, July 2, 2021 at 1:54 PM *To: *"miconda@gmail.com" miconda@gmail.com *Cc: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
I checked twice but nothing. I will test again in case I am missing something, I found it odd too that its failing but no error in debug.
I tried adding another header and msg_apply_changes() before the call to secsipid_add_identity(), and that doesnt show up in $mb or accessible by $hdr() either.
Daniel W. Graham, CTO
CMSInter.net LLC
DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
*From: *"miconda@gmail.com" miconda@gmail.com *Reply-To: *"miconda@gmail.com" miconda@gmail.com *Date: *Friday, July 2, 2021 at 1:46 PM *To: *Daniel Graham dan@cmsinter.net *Cc: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any?
Cheers, Daniel
On 02.07.21 18:18, Daniel W. Graham wrote:
Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug. I just changed to this and receive “Failed to apply changes”. if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); } -dan *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 9:24 AM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Cc: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect? Or you don't have msg_apply_changes() in the config and thus not executed? Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5 Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla <miconda@gmail.com> <mailto:miconda@gmail.com> wrote: Can you doublecheck msg_apply_changes() is executed? What version are you using? Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log. The identity header is being sent but still nothing in $mb Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs. Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>, Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
As a convenience fact, having all the common values from the header and payload would be nice. Decoding base64 and JSON is not particularly taxing, but when it comes to verification and subsequent fraud mitigation, the ability to grab the data from the token is necessary. Knowing the attestation, iat, orig and dest values become very useful here, and having quick accessors for the value would eliminate a few lines of boiler plate and enhance script readability.
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of Daniel-Constantin Mierla Sent: Monday, July 5, 2021 2:44 AM To: Daniel W. Graham dan@cmsinter.net; Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello, On 02.07.21 22:40, Daniel W. Graham wrote: Found it. record_route bit me.
ERROR: <core> [core/msg_translator.c:3355]: sip_msg_apply_changes(): cannot apply msg changes after adding record-route header - it breaks conditional 2nd header
Assuming not but thought I’d ask, any way to access a header before its added to the message?
the devel version has a function that stores the result in a variable and then can be added to the headers via append_hf():
* https://www.kamailio.org/docs/modules/devel/modules/secsipid.html#secsipid.f...
Future request, that secsipid_add_identity() returns the auto generated uuid for origid.
An option would be to add it the variable $secsipid(...) for convenience.
Right now you can parse the result with transformations and jannson/json modules to extract the origid field.
Or use the uuid module to generate the origid yourself in kamailio.cfg and provided as parameter.
Cheers, Daniel
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Friday, July 2, 2021 at 1:54 PM To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
I checked twice but nothing. I will test again in case I am missing something, I found it odd too that its failing but no error in debug.
I tried adding another header and msg_apply_changes() before the call to secsipid_add_identity(), and that doesnt show up in $mb or accessible by $hdr() either.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 1:46 PM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any?
Cheers, Daniel On 02.07.21 18:18, Daniel W. Graham wrote: Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug.
I just changed to this and receive “Failed to apply changes”.
if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); }
-dan
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 9:24 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Cc: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect?
Or you don't have msg_apply_changes() in the config and thus not executed?
Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5
Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla miconda@gmail.commailto:miconda@gmail.com wrote:
Can you doublecheck msg_apply_changes() is executed?
What version are you using?
Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log.
The identity header is being sent but still nothing in $mb
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:41 AM To: Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net, "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs.
Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Reply-To: "miconda@gmail.com"mailto:miconda@gmail.com miconda@gmail.commailto:miconda@gmail.com Date: Friday, July 2, 2021 at 2:09 AM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org, Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Subject: Re: [SR-Users] SECSIPID Identity Decode
Hello,
try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there?
Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity().
Is there a way to immediately read a header after its added?
I tried msg_apply_changes() but $hdr(Identity) is null.
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Daniel Graham dan@cmsinter.netmailto:dan@cmsinter.net Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 6:11 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.commailto:bkaufman@nexvortex.com Reply-To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Date: Thursday, July 1, 2021 at 12:49 PM To: "Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org On Behalf Of Daniel W. Graham Sent: Thursday, July 1, 2021 10:25 AM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Subject: Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.commailto:bkaufman@nexvortex.com> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too?
Ben Kaufman Sr. VoIP Engineer P: E: bkaufman@nexvortex.commailto:bkaufman@nexvortex.com 24 hour client support: 855.639.6300tel:+18556396300
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> On Behalf Of Daniel W. Graham Sent: Wednesday, June 30, 2021 10:31 PM To: Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org>; David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>; Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> Subject: Re: [SR-Users] SECSIPID Identity Decode
Here is an example, payload taken from Identity header.
Identity was added with secsipid_add_identity
Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n");
Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r'
-dan
From: sr-users <sr-users-bounces@lists.kamailio.orgmailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Reply-To: "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Date: Wednesday, June 30, 2021 at 5:32 PM To: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com>, "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Subject: Re: [SR-Users] SECSIPID Identity Decode
That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes.
I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t.
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
From: David Villasmil <david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com> Date: Wednesday, June 30, 2021 at 4:06 PM To: "miconda@gmail.commailto:miconda@gmail.com" <miconda@gmail.commailto:miconda@gmail.com>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org> Cc: Daniel Graham <dan@cmsinter.netmailto:dan@cmsinter.net> Subject: Re: [SR-Users] SECSIPID Identity Decode
I DO IT WITH:
# Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t});
Regards,
David Villasmil email: david.villasmil.work@gmail.commailto:david.villasmil.work@gmail.com phone: +34669448337
On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.commailto:miconda@gmail.com> wrote:
Hello,
not familiar with python functions, have you tried with Kamailio transformation?
https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64u...
Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like:
prefix = tprefix.encode("ascii", "ignore").decode()
Also, if you can, share the identity header here to test with and see if can be reproduced.
Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid.
(Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte
Header decodes fine this way but not payload.
Is this an issue with the payload encoding?
Kamailio 5.5
Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230
INTERNET | TELEPHONE | MANAGED IT
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
--
Daniel-Constantin Mierla -- www.asipto.comhttp://www.asipto.com
www.twitter.com/micondahttp://www.twitter.com/miconda -- www.linkedin.com/in/micondahttp://www.linkedin.com/in/miconda
At this moment, if using jansson/json modules feels complicated, then try to leverage inline execution of a JavaScript snippet via app_jsdt (which has no external library). The JSON can be parsed into a JS structure, making it easy to access the fields. I use this mechanism every time I need to do complex operations with json documents.
An unrelated example, which can help getting started, was posted in another discussion a while ago:
* https://lists.kamailio.org/pipermail/sr-users/2021-March/112156.html
Of course, having the attributes accessible via native cfg variables would be good, but from my point of view it doesn't look like having any spare time anytime soon. Obviously, contributions are welcome!
Cheers, Daniel
On 06.07.21 16:21, Ben Kaufman wrote:
As a convenience fact, having all the common values from the header and payload would be nice. Decoding base64 and JSON is not particularly taxing, but when it comes to verification and subsequent fraud mitigation, the ability to grab the data from the token is necessary. Knowing the attestation, iat, orig and dest values become very useful here, and having quick accessors for the value would eliminate a few lines of boiler plate and enhance script readability.
*Ben Kaufman*
/Sr. VoIP Engineer/
P:
E: bkaufman@nexvortex.com mailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300 tel:+18556396300
*From:* sr-users sr-users-bounces@lists.kamailio.org *On Behalf Of *Daniel-Constantin Mierla *Sent:* Monday, July 5, 2021 2:44 AM *To:* Daniel W. Graham dan@cmsinter.net; Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Subject:* Re: [SR-Users] SECSIPID Identity Decode
Hello,
On 02.07.21 22:40, Daniel W. Graham wrote:
Found it. record_route bit me. ERROR: <core> [core/msg_translator.c:3355]: sip_msg_apply_changes(): cannot apply msg changes after adding record-route header - it breaks conditional 2nd header Assuming not but thought I’d ask, any way to access a header before its added to the message?the devel version has a function that stores the result in a variable and then can be added to the headers via append_hf():
* https://www.kamailio.org/docs/modules/devel/modules/secsipid.html#secsipid.f... https://www.kamailio.org/docs/modules/devel/modules/secsipid.html#secsipid.f.secsipid_build_identity
Future request, that secsipid_add_identity() returns the auto generated uuid for origid.An option would be to add it the variable $secsipid(...) for convenience.
Right now you can parse the result with transformations and jannson/json modules to extract the origid field.
Or use the uuid module to generate the origid yourself in kamailio.cfg and provided as parameter.
Cheers, Daniel
-dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Friday, July 2, 2021 at 1:54 PM *To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Cc: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I checked twice but nothing. I will test again in case I am missing something, I found it odd too that its failing but no error in debug. I tried adding another header and msg_apply_changes() before the call to secsipid_add_identity(), and that doesnt show up in $mb or accessible by $hdr() either. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 1:46 PM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Cc: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode If msg_apply_changes() fails, then there has to be other error messages in the logs. Don't you see any? Cheers, Daniel On 02.07.21 18:18, Daniel W. Graham wrote: Sorry. msg_apply_changes() was in config and I didn’t see the execution in debug. I just changed to this and receive “Failed to apply changes”. if (!msg_apply_changes()) { xlogl("L_WARN", "Failed to apply changes\n"); } -dan *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 9:24 AM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Cc: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode What do you mean? Do you have msg_apply_changes() in the config, it is executed but has no effect? Or you don't have msg_apply_changes() in the config and thus not executed? Cheers, Daniel On 02.07.21 15:10, Daniel W. Graham wrote: Its not being executed. Version 5.5 Daniel W. Graham, CTO CMS Internet LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT On Jul 2, 2021, at 3:12 AM, Daniel-Constantin Mierla <miconda@gmail.com> <mailto:miconda@gmail.com> wrote: Can you doublecheck msg_apply_changes() is executed? What version are you using? Cheers, Daniel On 02.07.21 08:58, Daniel W. Graham wrote: I don’t see any issues in the log. The identity header is being sent but still nothing in $mb Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:41 AM *To: *Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Then secsipid_add_identity() or msg_apply_changes() failed -- do you get error messages? Try to run with debug=3 for seeing more details in the logs. Cheers, Daniel On 02.07.21 08:19, Daniel W. Graham wrote: Identity is not in $mb. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Reply-To: *"miconda@gmail.com" <mailto:miconda@gmail.com> <miconda@gmail.com> <mailto:miconda@gmail.com> *Date: *Friday, July 2, 2021 at 2:09 AM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org>, Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Hello, try to print $mb after secsipid_add_identity() and msg_apply_changes(), is the Identity header there? Cheers, Daniel On 02.07.21 07:53, Daniel W. Graham wrote: I need to immediately get the uuid created by secsipid_add_identity(). Is there a way to immediately read a header after its added? I tried msg_apply_changes() but $hdr(Identity) is null. -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Daniel Graham <dan@cmsinter.net> <mailto:dan@cmsinter.net> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 6:11 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Confirmed it was due to the sngrep copy. Thanks for mentioning it! -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> on behalf of Ben Kaufman <bkaufman@nexvortex.com> <mailto:bkaufman@nexvortex.com> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject: *Re: [SR-Users] SECSIPID Identity Decode Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!” *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org> <mailto:sr-users-bounces@lists.kamailio.org> *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org> <mailto:sr-users@lists.kamailio.org> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Haha, yep :) I wondered if that was biting me. -dan On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>-- Daniel-Constantin Mierla -- www.asipto.com http://www.asipto.com www.twitter.com/miconda http://www.twitter.com/miconda -- www.linkedin.com/in/miconda http://www.linkedin.com/in/miconda
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
Syslog showed many mysql/accounting related error between the time the response arrived to proxy and when proxy crashed (example below). So perhaps accounting failure delayed processing of the reply. pp Don't know the reason for the myslq problems.
-- Juha
Jul 2 06:06:51 rox2 /usr/bin/sip-proxy[21315]: ERROR: db_mysql [km_dbase.c:122] : db_mysql_submit_query(): driver error on query: Lost connection to MySQL serve r during query (2013) Jul 2 06:06:51 rox2 /usr/bin/sip-proxy[21315]: ERROR: db_mysql [km_dbase.c:145] : db_mysql_async_exec_task(): failed to execute query [insert into `accounting` (`method`,`from_tag`,`to_tag`,`callid`,`response_code`,`response_reason`,`t] on async worker
I assume this was mistakenly replied in the wrong thread, instead of the message with subject: [SR-Users] crash when sending reply.
With the async insert for acc module, the reply should have been released quickly, not waiting in the SIP worker process for insert to happen. Could you see the response being sent out in the sip traces before the crash?
Cheers, Daniel
On 02.07.21 19:54, Juha Heinanen wrote:
Syslog showed many mysql/accounting related error between the time the response arrived to proxy and when proxy crashed (example below). So perhaps accounting failure delayed processing of the reply. pp Don't know the reason for the myslq problems.
-- Juha
Jul 2 06:06:51 rox2 /usr/bin/sip-proxy[21315]: ERROR: db_mysql [km_dbase.c:122] : db_mysql_submit_query(): driver error on query: Lost connection to MySQL serve r during query (2013) Jul 2 06:06:51 rox2 /usr/bin/sip-proxy[21315]: ERROR: db_mysql [km_dbase.c:145] : db_mysql_async_exec_task(): failed to execute query [insert into `accounting` (`method`,`from_tag`,`to_tag`,`callid`,`response_code`,`response_reason`,`t] on async worker
Good to know that sngrep is truncating long headers when it displays them. Maybe it should be reported.
What I noticed with sngrep is that sometimes it does not display the traffic in the pcap file while ngrep shows the packets. I didn't get the time yet to dig in further and report back to the project -- mentioning it here, might be useful for other to know about.
Cheers, Daniel
On 02.07.21 00:11, Daniel W. Graham wrote:
Confirmed it was due to the sngrep copy. Thanks for mentioning it!
-dan
*From: *sr-users sr-users-bounces@lists.kamailio.org on behalf of Ben Kaufman bkaufman@nexvortex.com *Reply-To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Date: *Thursday, July 1, 2021 at 12:49 PM *To: *"Kamailio (SER) - Users Mailing List" sr-users@lists.kamailio.org *Subject: *Re: [SR-Users] SECSIPID Identity Decode
Dump the header to your log file, and copy it from there. I don’t know what happens with the ncurses in sngrep, but I finally looked them side by side and …. “Hey! This one’s missing bytes!”
*Ben Kaufman*
/Sr. VoIP Engineer/
P:
E: bkaufman@nexvortex.com mailto:bkaufman@nexvortex.com
24 hour client support: 855.639.6300 tel:+18556396300
*From:* sr-users sr-users-bounces@lists.kamailio.org *On Behalf Of *Daniel W. Graham *Sent:* Thursday, July 1, 2021 10:25 AM *To:* Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Subject:* Re: [SR-Users] SECSIPID Identity Decode
Haha, yep :) I wondered if that was biting me.
-dan
On Jul 1, 2021, at 11:07 AM, Ben Kaufman <bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com>> wrote: I observed a similar behavior, but it was the result of my cutting and pasting the identity header from sngrep, which looks to have dropped a few bytes on the line break. Any chance that’s what you’re doing, too? *Ben Kaufman* /Sr. VoIP Engineer/ P: E: bkaufman@nexvortex.com <mailto:bkaufman@nexvortex.com> 24 hour client support: 855.639.6300 <tel:+18556396300> *From:* sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> *On Behalf Of *Daniel W. Graham *Sent:* Wednesday, June 30, 2021 10:31 PM *To:* Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>>; David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>; Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> *Subject:* Re: [SR-Users] SECSIPID Identity Decode Here is an example, payload taken from Identity header. Identity was added with secsipid_add_identity Payload test: $var(test) = "eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6I5ODkyODkyMjgwIl19LCJpYXQiOjE2MjUxMDk2MzQsIm9yaWciOnsidG4iOiI5ODk0MDA0MjMwIn0sIm9yaWdpZCI6IjNmYmE4NTg0LTRkNzMtNGU2NC04NDc5LTQ5MjU2ZGIyMWFhYSJ9"; xlogl("L_WARN", "$(var(test){s.decode.base64t})\n"); Result is: {"attest":"A","dest":{"tn":#���#��##�#002%���&�#027B#�#023c#S#023#003�#023sB�&�&�r#��'F�#�#���C#003#003C#3#002'��&�&�v�B#�Vc�s#006f"�&6#026#022�CVCB�#023c3#022�3#0066#�#026#6#026S�r' -dan *From: *sr-users <sr-users-bounces@lists.kamailio.org <mailto:sr-users-bounces@lists.kamailio.org>> on behalf of Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Reply-To: *"Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Date: *Wednesday, June 30, 2021 at 5:32 PM *To: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>>, "miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode That’s the same way I am doing it, I was just trying to do a verification that the identity header/payload was correct before activating new changes. I will do further testing and share results. Just found it odd that the header would decode but payload wouldn’t. Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT *From: *David Villasmil <david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com>> *Date: *Wednesday, June 30, 2021 at 4:06 PM *To: *"miconda@gmail.com <mailto:miconda@gmail.com>" <miconda@gmail.com <mailto:miconda@gmail.com>>, "Kamailio (SER) - Users Mailing List" <sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>> *Cc: *Daniel Graham <dan@cmsinter.net <mailto:dan@cmsinter.net>> *Subject: *Re: [SR-Users] SECSIPID Identity Decode I DO IT WITH: # Break JWT $var(jwt1) = $(hdr(Identity){s.select,0,.}{s.decode.base64t}); $var(jwt2) = $(hdr(Identity){s.select,1,.}{s.decode.base64t}); Regards, David Villasmil email: david.villasmil.work@gmail.com <mailto:david.villasmil.work@gmail.com> phone: +34669448337 On Wed, Jun 30, 2021 at 8:48 PM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote: Hello, not familiar with python functions, have you tried with Kamailio transformation? https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url <https://www.kamailio.org/wiki/cookbooks/5.5.x/transformations#sdecodebase64url> Maybe you have to specify in Python that it is ASCII, I remember I had to do decoding when porting kamcli to work with Python3 -- had to change from using directly the variables received as parameter to a decoded value, something like: prefix = tprefix.encode("ascii", "ignore").decode() Also, if you can, share the identity header here to test with and see if can be reproduced. Cheers, Daniel On 30.06.21 21:14, Daniel W. Graham wrote: I am unable to base64url decode the json payload in identity header generated by secsipid. (Using python for test) decoded_payload = url64.decode(‘payload’) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xc2 in position 27: invalid continuation byte Header decodes fine this way but not payload. Is this an issue with the payload encoding? Kamailio 5.5 Daniel W. Graham, CTO CMSInter.net LLC DIRECT (989) 400-4230 INTERNET | TELEPHONE | MANAGED IT __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> -- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users> __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
-
Ben Kaufman -
Daniel W. Graham -
Daniel-Constantin Mierla -
David Villasmil -
Juha Heinanen