Re: Authentication qop auth-int

Hello Maxim,

thanks for the context. Regarding RFC 8760 interoperability, there have been also recently some extensions to the module to configure the SHA256 on a per-message base, I think.

The auth module in Kamailio is based on the one from SER which supported additional security protection mechanism, so it’s not that closely related to the code base used in the other project.

Due to the mentioned differences in the module implementation, it’s not feasible to import the code changes done there right away. But of course, we are always open for fixes e.g. as a pull request.

Cheers,

Henning

From: Maxim Sobolev via sr-users <[email protected]>
Sent: Samstag, 26. April 2025 21:33
To: Kamailio (SER) - Users Mailing List <[email protected]>
Cc: [email protected]; Maxim Sobolev <[email protected]>
Subject: [SR-Users] Re: Authentication qop auth-int

Kamalio support for auth-int (and all md5-sess too) is likely to be broken. I've fixed quite few bugs originating from 2005 era in the scope of the RFC8760 Interop prep that we've done for OpenSIPIt few years ago. To the best of my knowledge none has been pulled back into Kamalio and when confronting Daniel about RFC8760 year or two ago he was not particularly interested.

Your best recourse therefore is disable auth-int on the OpenSIPS side while dealing with Kamalio.

-Max

On Sat, Apr 26, 2025, 3:52 AM 13715209697--- via sr-users <[email protected]<mailto:[email protected]>> wrote:
There is a project that requires auth_int，OpenSIPS and Kamailio handle auth_int differently, which confuses me.
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]<mailto:[email protected]>
To unsubscribe send an email to [email protected]<mailto:[email protected]>
Important: keep the mailing list in the recipients, do not reply only to the sender!

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!