Debian SIP service status

[Daniel Pocock]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256



On 12/01/14 18:44, Jonas Smedegaard wrote:
> Hi Daniel,
> 
> Awesome work you are doing here!
> 
> Just a small detail:
> 
> Quoting Daniel Pocock (2014-01-12 18:19:58)
>> b) Users can administer their SIP passwords in a dedicated
>> sipPassword field in the Debian LDAP.  The passwords are stored
>> as HA1 values, where the "user" part is the full uid (e.g.
>> pocock at debian.org rather than just pocock) and the realm is
>> sip.debian.org - e.g.
>> 
>> echo -n pocock at debian.org:sip.debian.org:foobar | md5sum =>
>> 1ee8f60115a520297f737071f9a13a44
> 
> Is it SHA1 (I guess "HA1" is a typo) or MD5?

It is an abbreviation for H(A1) where

  A1=user:realm:password

  H denotes the hash function (which is MD5 here)

SIP DIGEST is much like HTTP DIGEST, where HA1 and HA2 first appeared

http://en.wikipedia.org/wiki/Digest_access_authentication

TURN is more modern, so it uses HMAC-SHA1 but it still uses an MD5 HA1
value for the passwords

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/
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=mPVQ
-----END PGP SIGNATURE-----