SIP

SIP 301 Moved Permanently vs 438 Invalid Identity Header

SIP 301 (Moved Permanently) is a 3xx Redirection response, while 438 (Invalid Identity Header) is a 4xx Client Failure response. 301 indicates that the user can no longer be found at the address in the Request-URI. The client should direct future requests to the new address in the Contact header. In contrast, 438 means that the server obtained the certificate from the Identity-Info header but the signature in the Identity header is invalid.

Description

The user can no longer be found at the address in the Request-URI. The client should direct future requests to the new address in the Contact header.

When You See It

When a user has permanently changed their SIP address. All future calls should be directed to the new URI.

How to Fix

Update your address book or routing tables to use the new Contact URI provided in the response.

Description

The server obtained the certificate from the Identity-Info header but the signature in the Identity header is invalid.

When You See It

When the cryptographic signature in the Identity header does not match the message content, indicating possible tampering.

How to Fix

Regenerate the Identity header with a correct signature. Ensure no intermediary is modifying signed headers after signing.

Key Differences

1.

301 is a 3xx Redirection response, while 438 is a 4xx Client Failure response.

2.

SIP 301: The user can no longer be found at the address in the Request-URI. The client should direct future requests to the new address in the Contact header.

3.

SIP 438: The server obtained the certificate from the Identity-Info header but the signature in the Identity header is invalid.

4.

You encounter 301 when when a user has permanently changed their SIP address. All future calls should be directed to the new URI.

5.

You encounter 438 when when the cryptographic signature in the Identity header does not match the message content, indicating possible tampering.

When to Use Which

For 301 (Moved Permanently): Update your address book or routing tables to use the new Contact URI provided in the response. For 438 (Invalid Identity Header): Regenerate the Identity header with a correct signature. Ensure no intermediary is modifying signed headers after signing.

Learn More