[Live-devel] Digest authentication and stale nonces

[Deanna Earley]

Thank you.

That is now correctly resending the request when the nonce is reported as stale:

GET_PARAMETER rtsp://10.1.3.47/onvif-media/media.amp?profile=icana_0&sessiontimeout=60&streamtype=unicast RTSP/1.0
CSeq: 8
Authorization: Digest username="onvif", realm="AXIS_WS_00408CC17E5B", nonce="001cc911Y84626878dc8eb0eefda9385042baafc027bd9", uri="rtsp://10.1.3.47/onvif-media/media.amp/", response="a919b9f950c37a211de3e68468627f96"
User-Agent: iCatcher RTSP Client (LIVE555 Streaming Media v2015.03.19)
Session: 2940A3CB

RTSP/1.0 401 Unauthorized
CSeq: 8
Session: 2940A3CB
WWW-Authenticate: Digest realm="AXIS_WS_00408CC17E5B", nonce="001cc9b7Y3821285f4aed77a1117879107da28e76339f4", stale=TRUE
Date: Fri, 20 Mar 2015 09:39:54 GMT

GET_PARAMETER rtsp://10.1.3.47/onvif-media/media.amp?profile=icana_0&sessiontimeout=60&streamtype=unicast RTSP/1.0
CSeq: 9
Authorization: Digest username="onvif", realm="AXIS_WS_00408CC17E5B", nonce="001cc9b7Y3821285f4aed77a1117879107da28e76339f4", uri="rtsp://10.1.3.47/onvif-media/media.amp/", response="88d5355ef1506b8de931d5ee2b4b0ff2"
User-Agent: iCatcher RTSP Client (LIVE555 Streaming Media v2015.03.19)
Session: 2940A3CB

RTSP/1.0 200 OK
CSeq: 9
Session: 2940A3CB
Date: Fri, 20 Mar 2015 09:39:54 GMT

--
Deanna Earley | Lead developer | icatchercctv

w: www.icode.co.uk/icatcher<http://www.icode.co.uk/icatcher> | t: 01329 835335 | f: 01329 835338
Registered Office : 71 The Hundred, Romsey, SO51 8BZ. Company Number : 03428325

From: live-devel [mailto:live-devel-bounces at ns.live555.com] On Behalf Of Ross Finlayson
Sent: 19 March 2015 17:05
To: LIVE555 Streaming Media - development & use
Subject: Re: [Live-devel] Digest authentication and stale nonces

Deanna,

Thanks for the note.

I've now installed a new version (2015.03.19) of the "LIVE555 Streaming Media" code that updates the RTSP client implementation to recognize the "stale=TRUE" parameter in a "WWW-Authenticate" response.  If set, this will now cause the command to be resent.

(This new version should now work with your server; if not, let me know.)

Ross Finlayson
Live Networks, Inc.
http://www.live555.com/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20150320/6ddcd568/attachment.html>