[asterisk-bugs] [Asterisk 0019052]: Authentication during registration with provider fails when challenge URI contains domain different from request URI

[Asterisk Bug Tracker]

The following issue has been UPDATED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=19052 
====================================================================== 
Reported By:                mervyn
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   19052
Category:                   Channels/chan_sip/Registration
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 312069 
Request Review:              
====================================================================== 
Date Submitted:             2011-04-01 02:03 CDT
Last Modified:              2011-04-05 17:11 CDT
====================================================================== 
Summary:                    Authentication during registration with provider
fails when challenge URI contains domain  different from request URI
Description: 
When trying to register with a provider, the provider issued a challenge
with domain="my.domain.net" which is different from the request URI of
"REGISTER sip:domain.com SIP/2.0". Instead of using the request URI in the
calculation of the digest authentication response, Asterisk uses the value
in the domain provided in the challenge and calculates an incorrect
response.
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-04-05 17:11 lmadsen        Additional Information Updated                  
 
======================================================================