Skip to content

VLC uses basic http authentication scheme instead of digest

I'm looking for a way to play .mp4 files from surveillance camera. Files are shared by http server protected by digest authentication. For some reason application tries to authenticate it self using basic authentication scheme instead of digest. Sniffed http requests are listed below.

VLC request

Hypertext Transfer Protocol
    GET /videos/video_20220708_100825_130.mp4 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /videos/video_20220708_100825_130.mp4 HTTP/1.1\r\n]
            [GET /videos/video_20220708_100825_130.mp4 HTTP/1.1\r\n]
            <Message: GET /videos/video_20220708_100825_130.mp4 HTTP/1.1\r\n>
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /videos/video_20220708_100825_130.mp4
        Request Version: HTTP/1.1
    Host: 192.168.0.116\r\n
    <Host: 192.168.0.116\r\n>
    Accept: */*\r\n
    <Accept: */*\r\n>
    Accept-Language: en_US\r\n
    <Accept-Language: en_US\r\n>
    Authorization: Basic ZmdjYW06YWRtaW4=\r\n
        Credentials: fgcam:admin
    <Authorization: Basic ZmdjYW06YWRtaW4=\r\n>
    User-Agent: VLC/3.0.16 LibVLC/3.0.16\r\n
    <User-Agent: VLC/3.0.16 LibVLC/3.0.16\r\n>
    Range: bytes=0-\r\n
    \r\n

Device response

Hypertext Transfer Protocol
    HTTP/1.1 401 Unauthorized\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 401 Unauthorized\r\n]
            [HTTP/1.1 401 Unauthorized\r\n]
            <Message: HTTP/1.1 401 Unauthorized\r\n>
            [Severity level: Chat]
            [Group: Sequence]
        Response Version: HTTP/1.1
        Status Code: 401
        [Status Code Description: Unauthorized]
        Response Phrase: Unauthorized
    Date: Wed, 20 Jul 2022 11:17:05 GMT\r\n
    <Date: Wed, 20 Jul 2022 11:17:05 GMT\r\n>
    Server: Apache/2.4.25\r\n
    <Server: Apache/2.4.25\r\n>
    WWW-Authenticate: Digest realm="FLS-IR3-HD", nonce="rJe2vTrkBQA=376f8785684c703f31b1e8c36328902338f58d03", algorithm=MD5, qop="auth"\r\n
    <WWW-Authenticate: Digest realm="FLS-IR3-HD", nonce="rJe2vTrkBQA=376f8785684c703f31b1e8c36328902338f58d03", algorithm=MD5, qop="auth"\r\n>
    Content-Length: 381\r\n
        [Content length: 381]
    <Content-Length: 381\r\n>
    Content-Type: text/html; charset=iso-8859-1\r\n
    <Content-Type: text/html; charset=iso-8859-1\r\n>
    \r\n
    <Response: True>
    [HTTP response 1/1]
    [Time since request: 0.040094000 seconds]

I'm attaching VLC log.

vlclog.log

Edited by ElPato
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information