[asterisk-bugs] [JIRA] (ASTERISK-29397) Asterisk isn't tolerant of RFC8760 UASs

[George Joseph (JIRA)]

George Joseph created ASTERISK-29397:
----------------------------------------

             Summary: Asterisk isn't tolerant of RFC8760 UASs
                 Key: ASTERISK-29397
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29397
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_pjsip_outbound_authenticator_digest
    Affects Versions: 18.3.0, 16.17.0
            Reporter: George Joseph
            Severity: Major


We are not currently tolerant of RFC8760 compliant UASs that send us multiple WWW-Authenticate headers.  If they send us one using SHA-256 and a second one using MD5, we fail when we see SHA-256 and don't continue to look for more WWW-Authenticate  headers.  I have a patch that at least makes us tolerant.




--
This message was sent by Atlassian JIRA
(v6.2#6252)