Module: kamailio Branch: master Commit: 8b60b56015ced6da3666c6613e1189b9a1f63d8f URL: https://github.com/kamailio/kamailio/commit/8b60b56015ced6da3666c6613e1189b9...
Author: Kamailio Dev kamailio.dev@kamailio.org Committer: Kamailio Dev kamailio.dev@kamailio.org Date: 2025-03-05T13:16:09+01:00
modules: readme files regenerated - auth ... [skip ci]
---
Modified: src/modules/auth/README
---
Diff: https://github.com/kamailio/kamailio/commit/8b60b56015ced6da3666c6613e1189b9... Patch: https://github.com/kamailio/kamailio/commit/8b60b56015ced6da3666c6613e1189b9...
---
diff --git a/src/modules/auth/README b/src/modules/auth/README index 193f91e0ef5..fcd73cc02a0 100644 --- a/src/modules/auth/README +++ b/src/modules/auth/README @@ -76,7 +76,7 @@ Daniel-Constantin Mierla 1.13. force_stateless_reply example 1.14. realm_prefix parameter example 1.15. force_stateless_reply example - 1.16. use SHA-256 example + 1.16. algorithm example 1.17. add Authentication-Info header example 1.18. consume_credentials example 1.19. consume_credentials example @@ -645,17 +645,18 @@ modparam("auth", "use_domain", 1) 3.18. algorithm (string)
Configure hash algorithm used for digest authentication. Possible - values are "MD5" or "SHA-256". If left empty MD5 is used. If specified, - the specified algorithm is used and is also put in the 'algorithm' - field of the challenge header. - - Warning: SHA-256 hash values take twice the space of MD5 hash values. - So a buffer overflow might occur if this option is used in combination - with another auth_* module that does not allocate at least 65 bytes to - store hash values. SHA-256 can safely be used with the module auth_db - as it allocates 256 bytes to store HA1 values. - - Example 1.16. use SHA-256 example + values are "MD5", "SHA-256" or "SHA-512". If left empty MD5 is used. If + specified, the specified algorithm is used and is also put in the + 'algorithm' field of the challenge header. + + Warning: SHA-256/512 hash values take twice or more the space of MD5 + hash values. So a buffer overflow might occur if this option is used in + combination with another auth_* module that does not allocate at least + enough (65 or 129) bytes to store hash values. SHA-256/512 can safely + be used with the module auth_db as it allocates 256 bytes to store HA1 + values. + + Example 1.16. algorithm example ... modparam("auth", "algorithm", "SHA-256") ...