Re: Successfully imported certificates fail with "error finding client identity keys"

On Sat, Nov 6, 2010 at 2:07 AM, James Martin <
[email protected]> wrote:

>  I am testing a DTLS snmp server using net-snmp version 5.6 on windows
> under cygwin as the client.
>
>
>
> I have several certificates that I have imported successfully using
> net-snmp-cert –t <friendly name> <cert_file_name> <key_file_name>
>
>
>
> When I use net-snmp-cert showcerts <friendly name>, it successfully finds
> the corresponding cert and dumps out info from it without issue.
>
>
>
> However, when I issue any snmp command using the same friendly name, such
> as snmpget, I get the following output:
>
>
>
> $ snmpget -v 3 -s tsm -t 10 -l authPriv -m +ALL -e
> "00000063000000A1000A0000A01
>
> 3" -T our_identity= client_cert_name -T their_identity=server_cert_name
> dtlsudp:192.168.1.97:10161 snmpTsmConfigurationUsePrefix.0
>
>
>
> No log handling enabled - using stderr logging
>
> hash type none not supported. using SHA1
>
> error finding client identity keys
>
> failed to create the SSL session structure
>
> failed to open a new dtls connection
>
> snmpget: Failure in sendto (Sub-id not found: (top) ->
> snmpTsmConfigurationUsePr
>
> efix) (No such file or directory)
>
> Segmentation fault (core dumped)
>
>
>
> Different certs give me different errors, and it seems like all of the
> certs that give me errors have been imported more than once under different
> friendly names.  Can this cause this problem?  Is there away to clean out
> the certificate store and remove all registered friendly names and start
> from scratch?
>
>
>
> Any other suggestions?
>

Is this issue Cygwin-specific ? What happens if you run the same command on
Linux after having built the same source tree with the configure command you
used on Cygwin ?

Bart.

------------------------------------------------------------------------------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users