Re: v3 AES support in 5.4.1

"Nathan Schrenk" <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
On Thu, Mar 27, 2008 at 8:48 AM, Qing <[email protected]> wrote:
> Hi,
>    5.4.1 is said to support AES, but the following command shows the snmpget does not even take
>  AES as a valid parameter??
>    I recompiled the source code on Solaris 9, with OpenSSL with AES support.
>
>  localhost_sys:> /opt/net-snmp-new/bin/snmpget -v 3 -u qing -l authpriv  -a SHA -A authpassword -x
>  AES -X privpassword localhost:4444 sysUpTime
>  Invalid privacy protocol specified after -x flag: AES

That command line looks okay to me, and a very similar command works
on my Linux system with net-snmp 5.4.1.  I compiled net-snmp against
openssl 0.98b.  I can confirm that "AES" is the correct way to specify
that you want use AES.

I suspect that when you compiled HAVE_AES was not defined to 1 for
some reason.  Maybe your version of openssl is too old?  If you look
in config.log after configuring net-snmp do you see lines that looks
like "#define HAVE_AES_CFB128_ENCRYPT 1" and "#define
HAVE_OPENSSL_AES_H 1"?  If not, you need to figure out why not.

Nathan

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.