Re: AES supported as Privacy encryption by 5.0.9?

    [ First - *please* don't mail me privately, without copying
     any responses to the mailing list.  I don't have the time
     or inclination to offer private, unpaid, SNMP consultancy.
     Keep discussions to the list, where others can both learn
     and offer advice.   And jump in when I get distracted with
     other things!  Thanks.   ]

On 04/03/2008, Qing <[email protected]> wrote:
>  We re-compiled the SNMP source code, with
>  openssl-0.9.7h. The OpenSSL is also installed in the
>  runtime environment.
>
>  My quick test:
>  1. add user line in snmpd.conf
>  createUser qing SHA myshapasswd AES myaespasswd
>  then restart agent with -DALL option.
>  It didn't complaint, but the config line did not
>  dissapear either.

Which snmpd.conf file did you put this line in?
/etc/snmp/snmpd.conf ?
/var/net-snmp/snmpd.conf?
Something else?

Was the agent running when you edited this file?

How did you restart the agent?



>  2. anyway, I went ahead to query with the new user,
>  as:
>  /opt/netsnmp5/bin/snmpgetnext -v 3 -n "" -u qing -a
>  SHA -A "myauthpassphrase" -x AES -X "myprivpassphrase"
>  -l authPriv localhost:4444 sysUpTime
>
>  Error msg:
>   "Invalid privacy protocol specified after -x flag: AES"

That certainly looks as if the library doesn't recognise the AES
support.   Unfortunately, I don't have a 5.0.x installation to test
this on, but I'm pretty sure it ought to work.

What do

    grep -i openssl  include/net-snmp/net-snmp-config.h
and
    grep -i aes  include/net-snmp/net-snmp-config.h

display?

Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users