[asterisk-bugs] [JIRA] (ASTERISK-25843) chan_sip: Registration passwords can not contain semicolon

[Private Name (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-25843?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=229985#comment-229985 ] 

Private Name edited comment on ASTERISK-25843 at 3/22/16 6:23 PM:
------------------------------------------------------------------

I made a mistake and I apologize. The issue is not with the colon, but the @ sign.
In fact, there is a service, a very popular one, which can be used from any softphone like Bria ot Xlite, but I cannot figure out how to use it from Asterisk, since the username in the register string includes a "@" sign.
I tried to use the "\"@ trick but in vain. The "\" is sent along to the provider and thus the line never registered.
For instance
XBXOp=secret
99912032=auth id
99912032=number

register => 10000000:XBXOp:99912032 at sip10.ringcentral.com:5090/10000000 ;fails to register
register => 10000000:XBXOp:99912032\@sip.ringcentral.com\:5060 at sip10.ringcentral.com:5090/10000000 ;fails to register

Asterisk's response is wrong:
Authorization: Digest username="99912032\@sip.ringcentral.com\:5060", realm="sip10.ringcentral.com", algorithm=MD5
it should be
Authorization: Digest username="99912032 at sip.ringcentral.com:5060", realm="sip10.ringcentral.com", algorithm=MD5

register => 10000000:XBXOp:99912032 at sip.ringcentral.com\:5060 at sip10.ringcentral.com:5090/10000000
but if I omit the "\", the information is read wrong
I can send you my registration information via private message, which work from a softphone.
In general, I think that Asterisk reads the line with an escaping "\" but it forgets to remove the escaping "\"






was (Author: falves11):
I made a mistake and I apologize. The issue is not with the colon, but the @ sign.
In fact, there is a service, a very popular one, which can be used from any softphone like Bria ot Xlite, but I cannot figure out how to use it from Asterisk, since the username in the register string includes a "@" sign.
I tried to use the "\@" trick but in vain. The "\" is sent along to the provider and thus the line never registered.
For instance
XBXOp=secret
99912032=auth id
99912032=number

register => 10000000:XBXOp:99912032 at sip10.ringcentral.com:5090/10000000 ;fails to register
register => 10000000:XBXOp:99912032\@sip.ringcentral.com\:5060 at sip10.ringcentral.com:5090/10000000 ;fails to register

Asterisk's response is wrong:
Authorization: Digest username="99912032\@sip.ringcentral.com\:5060", realm="sip10.ringcentral.com", algorithm=MD5
it should be
Authorization: Digest username="99912032 at sip.ringcentral.com:5060", realm="sip10.ringcentral.com", algorithm=MD5

register => 10000000:XBXOp:99912032 at sip.ringcentral.com\:5060 at sip10.ringcentral.com:5090/10000000
but if I omit the "\", the information is read wrong
I can send you my registration information via private message, which work from a softphone.
In general, I think that Asterisk reads the line with an escaping "\" but it forgets to remove the escaping "\"





> chan_sip: Registration passwords can not contain semicolon
> ----------------------------------------------------------
>
>                 Key: ASTERISK-25843
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25843
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/Registration
>    Affects Versions: 11.21.2
>         Environment: Centos 7
>            Reporter: Private Name
>            Severity: Minor
>
> Sometimes we need to register with register=> user:password at domain and the company has pre-created passwords that include a semicolon. In that case, Asterisk cannot do business, and the supplier allows for changing the sip password one by one, but, when you need to register 100s of accounts, this takes often days. It just happened to me. There is now workaround, I already asked in the mailing list. I request a fix where the "\" used before any character in the sip-password, escapes it.



--
This message was sent by Atlassian JIRA
(v6.2#6252)