gb28181 注册鉴权问题

Question

注册鉴权应答了response 依然返回401 Unauthorized，因为401带了qop="auth"，所以用的这种加密方式 "HA1:nonce:nc:cnonce:qop:HA2"

[REGISTER sip:61011300002000111111@172.16.1.221:8731 SIP/2.0
Via: SIP/2.0/UDP 172.16.1.117:5060;RPort=rport;branch=z9hG4bK1685170408715
CSeq: 53602 REGISTER
From: <sip:31011300072007240201@31011300>;tag=p2g82EIdIu1X94iSE6Nv2wgfhIKML3jK
To: <sip:61011300002000111111@172.16.1.221:8731>
Call-ID: RG2gcTrxCS
Max-Forwards: 70
Expires: 3600
User-Agent: yw-gb
Content-Length: 0
Authorization: Capability, algorithm="MD5"
Contact: <sip:61011300002000111111@172.16.1.117:5060>
]


[SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 172.16.1.117:5060;RPort=rport;branch=z9hG4bK1685170408715
From: <sip:31011300072007240201@31011300>;tag=p2g82EIdIu1X94iSE6Nv2wgfhIKML3jK
To: <sip:61011300002000111111@172.16.1.221:8731>;tag=621227071
CSeq: 53602 REGISTER
Call-ID: RG2gcTrxCS
User-Agent: LiveGBS v230506
Contact: <sip:61011300002000111111@172.16.1.117:5060>
Content-Length: 0
WWW-Authenticate: Digest realm="61011300",qop="auth",nonce="2e3fcf34d68f7e985812f5f40c06451c"

]

HA1: 31011300072007240201:61011300:123456 - 04fe0dd3d49543ebad02a99679fbaaac
HA2: REGISTER:sip:61011300002000111111@172.16.1.221:8731 - af6765ad4fea3d4bfa542441f4b81724
HA3: 04fe0dd3d49543ebad02a99679fbaaac:2e3fcf34d68f7e985812f5f40c06451c:00000001:dkhRhYdc:auth:af6765ad4fea3d4bfa542441f4b81724 - 3e18647b27e1d5e2c3947939f69d309f

[
REGISTER sip:61011300002000111111@172.16.1.221:8731 SIP/2.0
Via: SIP/2.0/UDP 172.16.1.117:5060;RPort=rport;branch=z9hG4bK1685170408731
CSeq: 53603 REGISTER
From: <sip:31011300072007240201@31011300>;tag=p2g82EIdIu1X94iSE6Nv2wgfhIKML3jK
To: <sip:61011300002000111111@172.16.1.221:8731>
Call-ID: RG2gcTrxCS
Max-Forwards: 70
Expires: 3600
User-Agent: yw-gb
Content-Length: 0
Authorization: Digest username="31011300072007240201",realm="61011300",nonce="2e3fcf34d68f7e985812f5f40c06451c",uri="sip:61011300002000111111@172.16.1.221:8731",response="3e18647b27e1d5e2c3947939f69d309f
",cnonce="dkhRhYdc",qop=auth,algorithm=MD5
Contact: <sip:61011300002000111111@172.16.1.221:8731>

]


[SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 172.16.1.117:5060;RPort=rport;branch=z9hG4bK1685170408731
From: <sip:31011300072007240201@31011300>;tag=p2g82EIdIu1X94iSE6Nv2wgfhIKML3jK
To: <sip:61011300002000111111@172.16.1.221:8731>;tag=336227081
CSeq: 53603 REGISTER
Call-ID: RG2gcTrxCS
User-Agent: LiveGBS v230506
Contact: <sip:61011300002000111111@172.16.1.221:8731>
Content-Length: 0
WWW-Authenticate: Digest realm="61011300",qop="auth",nonce="9ec021dafdc43e33c5f9d5f60286440b"

]

Answer 1

从响应可以看出,401 Unauthorized 返回了新的nonce,所以需要重新计算response并再次发送REGISTER方法。
计算步骤:
1. HA1 = 31011300072007240201:61011300:123456 = 04fe0dd3d49543ebad02a99679fbaaac
2. HA2 = REGISTER:<LINK::START sip::61011300002000111111@172.16.1.221:sip:61011300002000111111@172.16.1.221<LINK:END>:>8731 = af6765ad4fea3d4bfa542441f4b81724
3. nonce = 9ec021dafdc43e33c5f9d5f60286440b
4. cnonce = dkhRhYdc
5. nc = 00000002
6. qop = auth
7. HA3 = 04fe0dd3d49543ebad02a99679fbaaac:9ec021dafdc43e33c5f9d5f60286440b:00000002:dkhRhYdc:auth:af6765ad4fea3d4bfa542441f4b81724
     = 6e109455248998431c9c2637c356ed9b
发送新的REGISTER请求:
REGISTER sip:61011300002000111111@172.16.1.221:8731 SIP/2.0
Via: SIP/2.0/UDP 172.16.1.117:5060;RPort=rport;branch=z9hG4bK1685170408732
CSeq: 53604 REGISTER  
From: sip:31011300072007240201@31011300;tag=p2g82EIdIu1X94iSE6Nv2wgfhIKML3jK
To: sip:61011300002000111111@172.16.1.221:8731 
Call-ID: RG2gcTrxCS  
Max-Forwards: 70
Expires: 3600
User-Agent: yw-gb  
Content-Length: 0
Authorization: Digest username="31011300072007240201",realm="61011300",nonce="9ec021dafdc43e33c5f9d5f60286440b",uri="sip:61011300002000111111@172.16.1.221:8731",response="6e109455248998431c9c2637c356ed9b
",cnonce="dkhRhYdc",nc=00000002,qop=auth,algorithm=MD5
Contact: sip:61011300002000111111@172.16.1.221:8731