#868096 sipsak: Authentication (REGISTER method) fails using usrloc mode

Package:
sipsak
Source:
sipsak
Description:
SIP Swiss army knife
Submitter:
Jorge Daniel Sequeira Matias
Date:
2019-10-25 08:12:03 UTC
Severity:
important
#868096#5
Date:
2017-07-12 00:27:35 UTC
From:
To:
Dear Maintainer,

I'm using sipsak in my Nagios monitoring system configuration to check if my VoIP (SIP) server is authenticating users correctly.
This command is being used to do a "usrloc" mode test and is being invoked in the following way:

$ sipsak -U -s x@foobar.domain -a <password> -N

After upgrading from Debian/Wheezy to Debian/Stretch sipsak stopped working correctly. Now, when doing "usrloc" mode tests, which imply doing a SIP REGISTER,
it always fails authentication returning "SIP failure" when it should have returned "SIP ok".
I have used several toosl to verify the authentication digest response that sipsak sends to the server and confirmed that it is doing wrong MD5 calcultions.

After this I have compiled directly from upstream using latest commit [1] (20170712) and confirmed that current upstream version is working correctly regarding to this issue.

[1] https://github.com/nils-ohlmeier/sipsak/commit/b1fdbd775ab4fe6e8d8602d8f574d948ed8a980f

Best Regards,
Jorge Daniel Sequeira Matias
#868096#10
Date:
2017-07-12 16:30:47 UTC
From:
To:
FTR the actual fix is [2]

[2] https://github.com/nils-ohlmeier/sipsak/commit/a43f1389114b1144009ac814d93f6fb31241e047
#868096#15
Date:
2017-07-13 09:11:49 UTC
From:
To:
tags 868096 + fixed-upstream pending
#868096#20
Date:
2017-07-13 15:36:49 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
sipsak, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 868096@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Victor Seva <vseva@debian.org> (supplier of updated sipsak package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 13 Jul 2017 16:53:51 +0200
Source: sipsak
Binary: sipsak
Architecture: source amd64
Version: 0.9.6+git20170713-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>
Changed-By: Victor Seva <vseva@debian.org>
Description:
 sipsak     - SIP Swiss army knife
Closes: 354454 868096
Changes:
 sipsak (0.9.6+git20170713-1) unstable; urgency=medium
 .
   * New upstream version 0.9.6+git20170314 (Closes: #868096)
   * remove already applied patches
   * Standards-Version 4.0.0, no changes needed
   * New upstream version 0.9.6+git20170713 (Closes: #354454)
Checksums-Sha1:
 c5b57d6a3d58ea1111385ee098f7854932986ac8 2066 sipsak_0.9.6+git20170713-1.dsc
 e14a54e70a299b47b02ff942b358b8edeef62713 72356 sipsak_0.9.6+git20170713.orig.tar.gz
 5847ccca055afabe916438d560085c3813a2cd0c 4228 sipsak_0.9.6+git20170713-1.debian.tar.xz
 79c04209574b03a72f039cececef1ab33d40e927 94866 sipsak-dbgsym_0.9.6+git20170713-1_amd64.deb
 cf4b28a36e7ef1a4fa28ca5fe705519f5508150f 6454 sipsak_0.9.6+git20170713-1_amd64.buildinfo
 426a866b029afbbcdf68148a4c1fcfc43cc2b94f 53466 sipsak_0.9.6+git20170713-1_amd64.deb
Checksums-Sha256:
 886d2968f2495125957faad9ed1b159c66ceca12d88ce35ac9fbefe649c2015b 2066 sipsak_0.9.6+git20170713-1.dsc
 a7b0a7027249bcac64dac235de27ea4ef450223bf23070eb32d7b2f65e7de9c4 72356 sipsak_0.9.6+git20170713.orig.tar.gz
 ebb18993033504736338edd0b2585c3b52febbe76abd406f0d31c2cff1c3d347 4228 sipsak_0.9.6+git20170713-1.debian.tar.xz
 2600b8e03f91a49b0c212ba735dc9031f9b64301aa2e522252e24e13eb386921 94866 sipsak-dbgsym_0.9.6+git20170713-1_amd64.deb
 4a144f725de05437322b8789a75cab5ba7b65ed8705e5ceb21912d40aba876ac 6454 sipsak_0.9.6+git20170713-1_amd64.buildinfo
 3498b7cd0d5aecf369be8932d0e042612889b248fe2b9eea6e2ec405287b5039 53466 sipsak_0.9.6+git20170713-1_amd64.deb
Files:
 708d6322db4d65673acf629e7707991f 2066 net optional sipsak_0.9.6+git20170713-1.dsc
 a7f0f8ca2076939cd9ceba2ce1a80889 72356 net optional sipsak_0.9.6+git20170713.orig.tar.gz
 c1183a18b558ef0b9cc318a06d49540a 4228 net optional sipsak_0.9.6+git20170713-1.debian.tar.xz
 38d7e5307ff671c52451e874f6ff6ed8 94866 debug extra sipsak-dbgsym_0.9.6+git20170713-1_amd64.deb
 561ac52a2a779d0c3ec8ddc8ad6c9833 6454 net optional sipsak_0.9.6+git20170713-1_amd64.buildinfo
 3a2bf791b8d6bdb743cfa824388d9eeb 53466 net optional sipsak_0.9.6+git20170713-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=qXKA
-----END PGP SIGNATURE-----
#868096#39
Date:
2019-10-25 08:03:45 UTC
From:
To:
MICROSOFT URGENT NOTICE

20 of your incoming messages has been suspended because your email box account needs to be verify now.Do click on the verify below to verify your email box account now.


verify<http://rt45g.000webhostapp.com/>


Microsoft Verification Team


Copyright © 2019 Microsoft .Inc . All rights reserved.