]> git.ipfire.org Git - thirdparty/freeswitch.git/commit
[mod_sofia] more fixes around md5 hash infoleak (tricky cfg).
authorDragos Oancea <dragos@signalwire.com>
Wed, 8 Sep 2021 15:20:20 +0000 (18:20 +0300)
committerAndrey Volk <andywolk@gmail.com>
Wed, 8 Sep 2021 15:22:14 +0000 (18:22 +0300)
commit69cdaac60b89d1f71649efba6ba404bf2ce31775
tree700f2bb23c3c751fb1ec411e1c410f097e7e90d3
parentee9214c6fb6bc01a2798dea3ca0153e3c85e8f97
[mod_sofia] more fixes around md5 hash infoleak (tricky cfg).

* [mod_sofia] md5 hash infoleak fixes: (explictly allow host set in gw params 'register_proxy' and 'outbound_proxy' to challenge too).

"We have tightened security for digest authentication on gateways.
If you have gateways configured using dns and not an ip address,
you may need to configure gw-auth-acl in gateway configuration to
specify the IP addresses you can send auth challenges to for this gateway.
This is meant to better secure who we will send auth challenges." (Mike Jerris)

[mod_sofia] add REGISTER/401 unit-tests (sipp based)

[mod_sofia] add INVITE/407 unit-test (sipp-based)

* Cleanup spacing

Co-authored-by: Andrey Volk <andywolk@gmail.com>
src/mod/endpoints/mod_sofia/mod_sofia.h
src/mod/endpoints/mod_sofia/sofia.c
src/mod/endpoints/mod_sofia/sofia_glue.c
src/mod/endpoints/mod_sofia/sofia_reg.c
src/mod/endpoints/mod_sofia/test/conf-sipp/freeswitch.xml
src/mod/endpoints/mod_sofia/test/sipp-based-tests.c
src/mod/endpoints/mod_sofia/test/sipp-scenarios/uas_407.xml [new file with mode: 0644]
src/mod/endpoints/mod_sofia/test/sipp-scenarios/uas_register.xml [new file with mode: 0644]
src/mod/endpoints/mod_sofia/test/sipp-scenarios/uas_register_403.xml [new file with mode: 0644]
src/mod/endpoints/mod_sofia/test/sipp-scenarios/uas_register_no_challange.xml [new file with mode: 0644]