Net-SNMP 5.4 OpenSSL & AES Support

Hi,

I have managed to successfully build version 5.4 from the main source on
the download page.  Although the .dsp file for netsnmpmibssdk project
was corrupted I replaced it with the latest one out of SVN and it
proceeded to compile without error (following the README.WIN32
document).  I did both the static build and then the dynamic build with
OpenSSL (0.9.8e) support enabled as indicated.  Since there were no
errors I am led to believe the OpenSSL support is enabled.  (Actually,
there were errors, but only when building the perl modules...I believe
this doesn't matter, the visual studio projects built fine and that
should be all I need).

I have a piece of hardware that I need to get SNMP status from and it
will only accept connections with SHA-1 and AES.  I have the agent
configured to accept SNMP traffic of that sort from my machine.

Now, when I try to run the following command I receive the error
message: Invalid privacy protocol specified after -x flag: AES

C:\>snmpwalk -u username -a SHA -x AES -A password -X password -l
authpriv -n "" -Cp -Ct 10.1.1.6 1.3.6.1.4.1.8698.13 
(The hardware I'm getting status from is at 10.1.1.6)

The odd thing is if I change -x AES to -x DES it will try connecting and
just timeout.  The hardware won't accept DES so this isn't surprising,
but this leads me to believe once again that my build with OpenSSL is
valid.  For some reason it cannot find AES support, however.

When searching this list I saw the following:
------------------------------------------------------------------------
-----------------------------------------
Simon Edwards wrote:
> I believe I have tripped over several issues which stem from the
support
> of OpenSSL within Net-SNMP
> 
> I suspect that the following sequence of problems are fundamentally
> caused by a bug in net-snmp-config.h. The most important problem is
the
> header file issue as it very effectively disables AES support in 5.4.

Thanks for spotting this. This should now be fixed in CVS MAIN and the
5.4.x CVS branch. We'll see whether we can offer updated Win32 binaries.


+Thomas 
------------------------------------------------------------------------
-----------------------------------------

Is there some kind of problem with AES and Net-SNMP 5.4?  The only thing
I can think to do at this point is try rebuilding from scratch using the
nightly tarball dated 5/9/07 and hoping something has been fixed.

Help?

Thanks,
Justin

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users