[asterisk-bugs] [JIRA] (ASTERISK-21223) Asterisk no longer responds to SIP REGISTER's that don't contain an Authorization

[Sverre G (JIRA)]

Sverre G created ASTERISK-21223:
-----------------------------------

             Summary: Asterisk no longer responds to SIP REGISTER's that don't contain an Authorization
                 Key: ASTERISK-21223
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-21223
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Channels/chan_sip/Registration
    Affects Versions: 11.2.1
         Environment: CentOS 6.3
            Reporter: Sverre G
            Severity: Minor


On previous versions of Asterisk, e.g. 1.4.22, SIP clients (in particular some versions of firmware on the Cisco 7960) would attempt to register without any authorization header, causing Asterisk to reply with 401 Unauthorized, causing the SIP client to attempt to register again (but this time with an authorization header).

In the current version of Asterisk (11.2.1), Asterisk silently ignores clients that do not provide an authorization header, essentially not allowing these clients to register as they never receive the nonce that they need to continue.

See screenshots for side-by-side comparison of packets against Asterisk 1.4.22 versus Asterisk 11.2.1.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira