【C3-DESCRIBE】

Request: DESCRIBE rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream RTSP/1.0\r\n

CSeq: 4\r\n

Authorization: Digest username="admin", realm="4419b727ab09", nonce="66bb9f0bf5ac93a909ac8e88877ae727", uri="rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream", response="108084646408d21aa255664781c886fc"\r\n

User-Agent: LibVLC/2.1.3 (LIVE555 Streaming Media v2014.01.21)\r\n

Accept: application/sdp\r\n

\r\n

发送具有认证标识的信息到服务器，去获取服务器的资源列表。怎样的格式算正确认证的信息？这个关键在于response字段。[S2-REPLY]中反馈了两个信息realm="4419b727ab09", nonce="66bb9f0bf5ac93a909ac8e88877ae727",

**************************************response区域的计算规则如下***********************************

(1)当password为MD5编码,则

response = md5(::md5(:));

(2)当password为ANSI字符串,则

response = md5(md5(::)::md5(:));

***********************************************************************************************************

其中 password=密码,nonce=服务器返回的nonce,cmd=当前命令(DESCRIBE、SETUP等),realm=服务器返回的reaml,uri=请求的uri地址.当服务器接收到response为108084646408d21aa255664781c886fc的时候，服务器也会用这一套公式去计算，当发现计算出的值与客户端提供的值吻合的时候，则表明用户名和密码校验成功！

/*MD5加密函数*/ int md5_hash(const void *buff, size_t len, char *hexsum);

/*发送具有response认证的describe命令函数*/ void RtspRequest::SendRegisterRequest(string requestType) { string requestCmd; char cseq[256]; char session[256]; char author[500] = { 0 }; char acc[200] = { 0 }; char szInput[200] = { "" }; char szOutput[200] = { 0 }; char szMd5Pwd[200] = { 0 }; char szmd5methorduri[200] = { 0 }; m_CSeq++; if (m_SetupName.length()) { requestCmd = requestType; requestCmd += " "; requestCmd += m_RequestsMrl; requestCmd += "/"; requestCmd += m_SetupName; requestCmd += " RTSP/1.0"; m_SetupName = ""; } else { requestCmd = requestType; requestCmd += " "; requestCmd += m_RequestsMrl; requestCmd += " RTSP/1.0"; } //当password为ANSI字符串 response = md5(md5(::)::md5(:)); //md5(::)=md5(admin:4419b727ab09:12345)=fa47d934c754db5ebebd9b42a4412073 sprintf_s(szInput, 200, "%s:%s:%s", m_uername.c_str(), m_realm.c_str(), m_password.c_str()); md5_hash(szInput, strlen(szInput), szMd5Pwd); //md5(:)=md5(DESCRIBE:rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream) =0b0a4e77e852876bdfdf6ecb72ba3900 sprintf_s(szInput, 200, "DESCRIBE:%s", m_RequestsMrl.c_str()); md5_hash(szInput, strlen(szInput), szmd5methorduri); //md5(md5(::)::md5(:)); //=md5(fa47d934c754db5ebebd9b42a4412073:66bb9f0bf5ac93a909ac8e88877ae727:0b0a4e77e852876bdfdf6ecb72ba3900) //=108084646408d21aa255664781c886fc //关于这一条，http://www.3464.com/Tools/MD5/index.asp 网站给出的结论则不一致：98f90a583e5c436f83da956c9b00767b //我的代码给出的值与VLC和其它工具给出的值完全匹配 sprintf_s(szInput, 200, "%s:%s:%s", szMd5Pwd, m_nonce.c_str(), szmd5methorduri); md5_hash(szInput, strlen(szInput), szOutput); m_response = szOutput; _snprintf(cseq, 256, "CSeq: %u", m_CSeq); _snprintf(author, 500, "Authorization: Digest username=\"%s\", realm=\"%s\", nonce=\"%s\", uri=\"%s\", response=\"%s\"", m_uername.c_str(), m_realm.c_str(), m_nonce.c_str(), m_RequestsMrl.c_str(), m_response.c_str()); _snprintf(acc, 500, "Accept: application/sdp"); if (requestType.compare("TEARDOWN") == 0) m_Session = 0; _snprintf(session, 256, "Session: %I64u", m_Session); Write(requestCmd.c_str()); Write(cseq); Write(author); Write("User-Agent: LibVLC/2.1.3 (LIVE555 Streaming Media v2014.01.21)"); Write(acc); if (m_Session > 0) Write(session); WriteFields(); Write(""); }

【S3-REPLY】

Response: RTSP/1.0 200 OK\r\n

CSeq: 4\r\n

Content-type: application/sdp

Content-Base: rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream/\r\n

Content-length: 672

\r\n

Session Description Protocol

Session Description Protocol Version (v): 0

Owner/Creator, Session Id (o): - 1417089581269778 1417089581269778 IN IP4 192.168.1.145

Session Name (s): Media Presentation

E-mail Address (e): NONE

Bandwidth Information (b): AS:5100

Time Description, active time (t): 0 0

Session Attribute (a): control:rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream/

Media Description, name and address (m): video 0 RTP/AVP 96

Bandwidth Information (b): AS:5000

Media Attribute (a): control:rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream/trackID=1

Media Attribute (a): rtpmap:96 H264/90000

Media Attribute (a): fmtp:96 profile-level-id=420029; packetization-mode=1; sprop-parameter-sets=Z0KAH4iLUCgC3QgAADhAAAr8gCA=,aM44gA==

Media Description, name and address (m): audio 0 RTP/AVP 0

Bandwidth Information (b): AS:50

Media Attribute (a): control:rtsp://192.168.1.145:554/MPEG-4/ch2/main/av_stream/trackID=2

Media Attribute (a): rtpmap:0 PCMU/8000

Media Attribute (a): Media_header:MEDIAINFO=494D4B48010100000400010010710110401F000000FA000000000000000000000000000000000000;

Media Attribute (a): appversion:1.0

首先第一行给了OK，表明上一个命令成功--DESCRIBE成功得到服务器认证

其次，给出了服务器的媒体信息-具有两路码流--音频(audio)和视频(video) 并给出了请求两路数据的地址