[asterisk-bugs] [JIRA] (ASTERISK-30276) res_pjsip: Mediasec requires different headers on 401 response

[Maximilian Fridrich (JIRA)]

Maximilian Fridrich created ASTERISK-30276:
----------------------------------------------

             Summary: res_pjsip: Mediasec requires different headers on 401 response
                 Key: ASTERISK-30276
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30276
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Resources/res_pjsip, Resources/res_pjsip_outbound_registration
    Affects Versions: 16.29.0, 18.15.0, 20.0.0
            Reporter: Maximilian Fridrich


The Deutsche Telekom requires certain headers in SIP requests which are based on [draft-dawes-sipcore-mediasec-parameter|https://datatracker.ietf.org/doc/html/draft-dawes-dispatch-mediasec-parameter-07]. This draft requires different headers in requests sent after a 401 as compared to 494. Specifically, in requests sent after a 401 response, the Security-Client header must still be present (see [section 6.1 in the draft|https://datatracker.ietf.org/doc/html/draft-dawes-dispatch-mediasec-parameter-07#section-6.1]) while in requests after a 494 it should not be present.

The original mediasec implementation didn't consider that.



--
This message was sent by Atlassian JIRA
(v6.2#6252)