Help needed in net-snmp 5.7.1 using DTLS

"B Sreekanth" <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <1360305314.S.73681.autosave.drafts.old.1360576305.8875@webmail.rediffmail.com>
Hi,




I have a task to use net-snmp for my project. For that we are implementing a prototype and should able to use send requests and receive notifications from agent and trapdistributor. 

Somehow we are able to install net-snmp 5.7.1 in our solaris 10 server. Here we could not able to establish DTLS 

connection ( which we use for security purpose), with which we are failing with snmpget command. 




Below errors we got while using snmpget commnd:




************************Error 1

************************




server@visakha&gt; snmpd -f -Le -Dtsm,dtls,tls,openssl,cert dtlsudp:localhost:10161registered debug token tsm, 1registered debug token dtls, 1registered debug token tls, 1registered debug token openssl, 1registered debug token cert, 1dtlsudp: registering DTLS constructortlstcp: registering TLS constructortsm: registering ourselvestsm:&nbsp; returned 0cert:util:init: initcert:index:add: dir /usr/local/share/snmp/tls/ca-certs at index 0cert:index:add: dir /usr/local/share/snmp/tls/certs at index 1cert:index:add: dir /usr/local/share/snmp/tls/private at index 2cert:index:add: dir /home/nmsadm/.snmp/tls/ca-certs at index 3cert:index:add: dir /home/nmsadm/.snmp/tls/certs at index 4cert:index:add: dir /home/nmsadm/.snmp/tls/private at index 5cert:index:dir: Scanning directory /usr/local/share/sn
 mp/tls/ca-certscert:index:lookup: /usr/local/share/snmp/tls/ca-certs (0) /usr/snmp/persist/cert_indexes/0cert:index:parse: The index for /usr/local/share/snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/certscert:index:lookup: /usr/local/share/snmp/tls/certs (1) /usr/snmp/persist/cert_indexes/1cert:index:parse: The index for /usr/local/share/snmp/tls/certs looks goodcert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/privatecert:index:lookup: /usr/local/share/snmp/tls/private (2) /usr/snmp/persist/cert_indexes/2cert:index:parse: The index for /usr/local/share/snmp/tls/private looks goodcert:key:struct:new: new key 0x0x10c540 for snmpd.keycert:key:struct:new
 : new key 0x0x10c560 for managerold.keycert:key:struct:new: new key 0x0x10c580 for hostname.example.com.keycert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/ca-certscert:index:lookup: /home/nmsadm/.snmp/tls/ca-certs (3) /usr/snmp/persist/cert_indexes/3cert:index:parse: The index for /home/nmsadm/.snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/certscert:index:lookup: /home/nmsadm/.snmp/tls/certs (4) /usr/snmp/persist/cert_indexes/4cert:index:parse: The index for /home/nmsadm/.snmp/tls/certs looks goodcert:index:parse: added 2 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/privatecert:index:lookup: /home/nmsadm/.snmp/tls/private (5) /
 usr/snmp/persist/cert_indexes/5cert:index:parse: The index for /home/nmsadm/.snmp/tls/private looks goodcert:key:struct:new: new key 0x0x10c5e0 for tutorial-joecool.keycert:index:parse: added 1 certs from indexcert:partner: hostname.example.com.crt match found!cert:partner: managerold.crt match found!cert:partner: snmpd.crt match found!cert:partner: tutorial-joecool.crt match found!cert:key:read: Checking file snmpd.keycert:key:read: Checking file managerold.keycert:key:read: Checking file tutorial-joecool.keycert:key:read: Checking file hostname.example.com.keycert:dump: -------------------- Certificates -----------------cert:dump: cert tutorial-CA.crt in /home/nmsadm/.snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xa (CA+remote_peer)cert:dump: cert snmpd.crt in /usr/local/
 share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert manager.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert managerold.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert tutorial-agent.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert tutorial-joecool.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert hostname.example.com.crt in /usr/local/share/snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xb (CA+identity+remote_peer)cert:dump: key hostname.example.com.key in /us
 r/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key managerold.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key snmpd.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key tutorial-joecool.key in /home/nmsadm/.snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: ------------------------ End ----------------------/usr/local/share/snmp/snmpd.conf: line 36: Warning: The separate port argument to trapsink is deprecated/usr/local/share/snmp/snmpd.conf: line 44: Warning: serverCert is deprecated. Clients should use peerCert, servers should use localCert.cert:util:config: parsing 20 89:B7:CA:DB:BC:C4
 :A9:70:DF:84:0B:C4:7E:1C:2C:41:9A:14:8F:A1 --sn joecoolcert:find:params: looking for remote_peer(2) in MULTIPLE(0x200), hint 4290762456cert:find:params: looking for remote_peer(2) in FINGERPRINT(0x2), hint 4290762456cert:find:params:&nbsp; hint = 89:B7:CA:DB:BC:C4:A9:70:DF:84:0B:C4:7E:1C:2C:41:9A:14:8F:A1cert:find:found: using cert manager.crt / 89b7cadbbcc4a970df840bc47e1c2c419a148fa1 for remote_peer(2) (uses=remote_peer (2))cert:find:found: using cert manager.crt / 89b7cadbbcc4a970df840bc47e1c2c419a148fa1 for remote_peer(2) (uses=remote_peer (2))cert:map:add: pri 20, fp 89b7cadbbcc4a970df840bc47e1c2c419a148fa1dtlsudp: netsnmp_dtlsudp_transport(): transports/snmpDTLSUDPDomain.c, 1414:A SNMP version other than 3 was requested with (D)TLS; using 3 anywaystsm: TSM: Reached our session init
 ialization callbacktsm: TSM: Reached our session initialization callback

Sending 44 bytes to UDP: [127.0.0.1]:162-&gt;[0.0.0.0]:00000: 30 2A 02 01&nbsp; 00 04 06 70&nbsp; 75 62 6C 69&nbsp; 63 A4 1D 06&nbsp;&nbsp;&nbsp; 0*.....public...0016: 0A 2B 06 01&nbsp; 04 01 BF 08&nbsp; 03 02 03 40&nbsp; 04 AC 10 41&nbsp;&nbsp;&nbsp; [email protected]: BD 02 01 00&nbsp; 02 01 00 43&nbsp; 01 4A 30 00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; .......C.J0.

NET-SNMP version 5.7.1




*** waiting here ************server@visakha&gt; snmpget -v 3 -Dtsm,dtls,tls,openssl,cert -c public dtlsudp:localhost:10161 sysContact.0registered debug token tsm, 1registered debug token dtls, 1registered debug token tls, 1registered debug token openssl, 1registered debug token cert, 1tsm: registering ourselvestsm:&nbsp; returned 0cert:util:init: initcert:index:add: dir /usr/local/share/snmp/tls/ca-certs at index 0cert:index:add: dir /usr/local/share/snmp/tls/certs at index 1cert:index:add: dir /usr/local/share/snmp/tls/private at index 2cert:index:add: dir /home/nmsadm/.snmp/tls/ca-certs at index 3cert:index:add: dir /home/nmsadm/.snmp/tls/certs at index 4cert:index:add: dir /home/nmsadm/.snmp/tls/private at index 5cert:index:dir: Scanning directory /usr/local/share/snmp/tls/ca-certscert:
 index:lookup: /usr/local/share/snmp/tls/ca-certs (0) /usr/snmp/persist/cert_indexes/0cert:index:parse: The index for /usr/local/share/snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/certscert:index:lookup: /usr/local/share/snmp/tls/certs (1) /usr/snmp/persist/cert_indexes/1cert:index:parse: The index for /usr/local/share/snmp/tls/certs looks goodcert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/privatecert:index:lookup: /usr/local/share/snmp/tls/private (2) /usr/snmp/persist/cert_indexes/2cert:index:parse: The index for /usr/local/share/snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bbe8 for snmpd.keycert:key:struct:new: new key 0x0x3bc08 f
 or managerold.keycert:key:struct:new: new key 0x0x3bc28 for hostname.example.com.keycert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/ca-certscert:index:lookup: /home/nmsadm/.snmp/tls/ca-certs (3) /usr/snmp/persist/cert_indexes/3cert:index:parse: The index for /home/nmsadm/.snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/certscert:index:lookup: /home/nmsadm/.snmp/tls/certs (4) /usr/snmp/persist/cert_indexes/4cert:index:parse: The index for /home/nmsadm/.snmp/tls/certs looks goodcert:index:parse: added 2 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/privatecert:index:lookup: /home/nmsadm/.snmp/tls/private (5) /usr/snmp/persist/cert_i
 ndexes/5cert:index:parse: The index for /home/nmsadm/.snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bc88 for tutorial-joecool.keycert:index:parse: added 1 certs from indexcert:partner: hostname.example.com.crt match found!cert:partner: managerold.crt match found!cert:partner: snmpd.crt match found!cert:partner: tutorial-joecool.crt match found!cert:key:read: Checking file snmpd.keycert:key:read: Checking file managerold.keycert:key:read: Checking file tutorial-joecool.keycert:key:read: Checking file hostname.example.com.keycert:dump: -------------------- Certificates -----------------cert:dump: cert tutorial-CA.crt in /home/nmsadm/.snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xa (CA+remote_peer)cert:dump: cert snmpd.crt in /usr/local/share/snmp/tls/certscert
 :dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert manager.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert managerold.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert tutorial-agent.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert tutorial-joecool.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert hostname.example.com.crt in /usr/local/share/snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xb (CA+identity+remote_peer)cert:dump: key hostname.example.com.key in /usr/local/share/snmp/tls/p
 rivatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key managerold.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key snmpd.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key tutorial-joecool.key in /home/nmsadm/.snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: ------------------------ End ----------------------dtlsudp: netsnmp_dtlsudp_transport(): transports/snmpDTLSUDPDomain.c, 1414:tsm: TSM: Reached our session initialization callbacktsm: Starting TSM processingtsm: TSM processing completed.

Sending 69 bytes to DTLSUDP: [0.0.0.0]:1-&gt;[0.0.0.0]:00000: 30 43 02 01&nbsp; 03 30 11 02&nbsp; 04 66 10 E9&nbsp; 0B 02 03 00&nbsp;&nbsp;&nbsp; 0C...0...f......0016: FF E3 04 01&nbsp; 04 02 01 04&nbsp; 04 00 30 29&nbsp; 04 05 80 00&nbsp;&nbsp;&nbsp; ..........0)....0032: 00 00 06 04&nbsp; 00 A0 1E 02&nbsp; 04 5C 6B 32&nbsp; CF 02 01 00&nbsp;&nbsp;&nbsp; .........\k2....0048: 02 01 00 30&nbsp; 10 30 0E 06&nbsp; 0A 2B 06 01&nbsp; 06 03 0A 02&nbsp;&nbsp;&nbsp; ...0.0...+......0064: 01 01 00 05&nbsp; 00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; .....

dtlsudp: sending 69 bytesdtlsudp: starting a new connectiondtlsudp: starting a new connection as a client to sock: 4cert:find:params: looking for identity(1) in DEFAULT(0x0), hint 0cert:find:params:&nbsp; hint = clientcert:find:params: looking for identity(1) in FILE(0x1), hint 234008cert:find:params:&nbsp; hint = snmpapperror finding client identity keysfailed to create the SSL session structurefailed to open a new dtls connectionfailed rfc5343 contextEngineID probingsnmpget: Failure in sendto (Sub-id not found: (top) -&gt; sysContact)dtlsudp:close: closing dtlsudp transport 65e68tlsbase: Freeing TLS Base data for a sessionserver@visakha&gt;

************************Error 2

************************

server@visakha&gt; snmpd -f -Le -Dtsm,dtls,tls,openssl,cert dtlsudp:localhost:10161

server@visakha&gt; snmpget -v 2c -Dtsm,dtls,tls,openssl,cert -c public localhost sysContact.0registered debug token tsm, 1registered debug token dtls, 1registered debug token tls, 1registered debug token openssl, 1registered debug token cert, 1tsm: registering ourselvestsm:&nbsp; returned 0cert:util:init: initcert:index:add: dir /usr/local/share/snmp/tls/ca-certs at index 0cert:index:add: dir /usr/local/share/snmp/tls/certs at index 1cert:index:add: dir /usr/local/share/snmp/tls/private at index 2cert:index:add: dir /home/nmsadm/.snmp/tls/ca-certs at index 3cert:index:add: dir /home/nmsadm/.snmp/tls/certs at index 4cert:index:add: dir /home/nmsadm/.snmp/tls/private at index 5cert:index:dir: Scanning directory /usr/local/share/snmp/tls/ca-certscert:index:lookup: /usr/local/share/snmp/tls/ca
 -certs (0) /usr/snmp/persist/cert_indexes/0cert:index:parse: The index for /usr/local/share/snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/certscert:index:lookup: /usr/local/share/snmp/tls/certs (1) /usr/snmp/persist/cert_indexes/1cert:index:parse: The index for /usr/local/share/snmp/tls/certs looks goodcert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/privatecert:index:lookup: /usr/local/share/snmp/tls/private (2) /usr/snmp/persist/cert_indexes/2cert:index:parse: The index for /usr/local/share/snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bbe8 for snmpd.keycert:key:struct:new: new key 0x0x3bc08 for managerold.keycert:key:struct:new: new 
 key 0x0x3bc28 for hostname.example.com.keycert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/ca-certscert:index:lookup: /home/nmsadm/.snmp/tls/ca-certs (3) /usr/snmp/persist/cert_indexes/3cert:index:parse: The index for /home/nmsadm/.snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/certscert:index:lookup: /home/nmsadm/.snmp/tls/certs (4) /usr/snmp/persist/cert_indexes/4cert:index:parse: The index for /home/nmsadm/.snmp/tls/certs looks goodcert:index:parse: added 2 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/privatecert:index:lookup: /home/nmsadm/.snmp/tls/private (5) /usr/snmp/persist/cert_indexes/5cert:index:parse: The index for /h
 ome/nmsadm/.snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bc88 for tutorial-joecool.keycert:index:parse: added 1 certs from indexcert:partner: hostname.example.com.crt match found!cert:partner: managerold.crt match found!cert:partner: snmpd.crt match found!cert:partner: tutorial-joecool.crt match found!cert:key:read: Checking file snmpd.keycert:key:read: Checking file managerold.keycert:key:read: Checking file tutorial-joecool.keycert:key:read: Checking file hostname.example.com.keycert:dump: -------------------- Certificates -----------------cert:dump: cert tutorial-CA.crt in /home/nmsadm/.snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xa (CA+remote_peer)cert:dump: cert snmpd.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 
 (identity+remote_peer)cert:dump: cert manager.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert managerold.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert tutorial-agent.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert tutorial-joecool.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert hostname.example.com.crt in /usr/local/share/snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xb (CA+identity+remote_peer)cert:dump: key hostname.example.com.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 
 flags 0x1 (identity)cert:dump: key managerold.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key snmpd.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key tutorial-joecool.key in /home/nmsadm/.snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: ------------------------ End ----------------------tsm: TSM: Reached our session initialization callback

Sending 43 bytes to UDP: [127.0.0.1]:161-&gt;[0.0.0.0]:00000: 30 29 02 01&nbsp; 01 04 06 70&nbsp; 75 62 6C 69&nbsp; 63 A0 1C 02&nbsp;&nbsp;&nbsp; 0).....public...0016: 04 2A E4 96&nbsp; FE 02 01 00&nbsp; 02 01 00 30&nbsp; 0E 30 0C 06&nbsp;&nbsp;&nbsp; .*.........0.0..0032: 08 2B 06 01&nbsp; 02 01 01 04&nbsp; 00 05 00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; .+.........

Received 69 byte packet from UDP: [127.0.0.1]:161-&gt;[0.0.0.0]:00000: 30 43 02 01&nbsp; 01 04 06 70&nbsp; 75 62 6C 69&nbsp; 63 A2 36 02&nbsp;&nbsp;&nbsp; 0C.....public.6.0016: 04 2A E4 96&nbsp; FE 02 01 00&nbsp; 02 01 00 30&nbsp; 28 30 26 06&nbsp;&nbsp;&nbsp; .*.........0(0&amp;.0032: 08 2B 06 01&nbsp; 02 01 01 04&nbsp; 00 04 1A 40&nbsp; 74 63 73 2E&nbsp;&nbsp;&nbsp; [email protected]: 65 78 74 65&nbsp; 72 6E 2E 61&nbsp; 6F 2E 65 72&nbsp; 69 63 73 73&nbsp;&nbsp;&nbsp; extern.ao.ericss0064: 6F 6E 2E 73&nbsp; 65&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; on.se

SNMPv2-MIB::sysContact.0 = STRING: @tcs.extern.ao.ericsson.se

server@visakha&gt; snmpget -v 3 -Dtsm,dtls,tls,openssl,cert -c public localhost sysContact.0registered debug token tsm, 1registered debug token dtls, 1registered debug token tls, 1registered debug token openssl, 1registered debug token cert, 1tsm: registering ourselvestsm:&nbsp; returned 0cert:util:init: initcert:index:add: dir /usr/local/share/snmp/tls/ca-certs at index 0cert:index:add: dir /usr/local/share/snmp/tls/certs at index 1cert:index:add: dir /usr/local/share/snmp/tls/private at index 2cert:index:add: dir /home/nmsadm/.snmp/tls/ca-certs at index 3cert:index:add: dir /home/nmsadm/.snmp/tls/certs at index 4cert:index:add: dir /home/nmsadm/.snmp/tls/private at index 5cert:index:dir: Scanning directory /usr/local/share/snmp/tls/ca-certscert:index:lookup: /usr/local/share/snmp/tls/ca-
 certs (0) /usr/snmp/persist/cert_indexes/0cert:index:parse: The index for /usr/local/share/snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/certscert:index:lookup: /usr/local/share/snmp/tls/certs (1) /usr/snmp/persist/cert_indexes/1cert:index:parse: The index for /usr/local/share/snmp/tls/certs looks goodcert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /usr/local/share/snmp/tls/privatecert:index:lookup: /usr/local/share/snmp/tls/private (2) /usr/snmp/persist/cert_indexes/2cert:index:parse: The index for /usr/local/share/snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bbe8 for snmpd.keycert:key:struct:new: new key 0x0x3bc08 for managerold.keycert:key:struct:new: new k
 ey 0x0x3bc28 for hostname.example.com.keycert:index:parse: added 3 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/ca-certscert:index:lookup: /home/nmsadm/.snmp/tls/ca-certs (3) /usr/snmp/persist/cert_indexes/3cert:index:parse: The index for /home/nmsadm/.snmp/tls/ca-certs looks goodcert:index:parse: added 1 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/certscert:index:lookup: /home/nmsadm/.snmp/tls/certs (4) /usr/snmp/persist/cert_indexes/4cert:index:parse: The index for /home/nmsadm/.snmp/tls/certs looks goodcert:index:parse: added 2 certs from indexcert:index:dir: Scanning directory /home/nmsadm/.snmp/tls/privatecert:index:lookup: /home/nmsadm/.snmp/tls/private (5) /usr/snmp/persist/cert_indexes/5cert:index:parse: The index for /ho
 me/nmsadm/.snmp/tls/private looks goodcert:key:struct:new: new key 0x0x3bc88 for tutorial-joecool.keycert:index:parse: added 1 certs from indexcert:partner: hostname.example.com.crt match found!cert:partner: managerold.crt match found!cert:partner: snmpd.crt match found!cert:partner: tutorial-joecool.crt match found!cert:key:read: Checking file snmpd.keycert:key:read: Checking file managerold.keycert:key:read: Checking file tutorial-joecool.keycert:key:read: Checking file hostname.example.com.keycert:dump: -------------------- Certificates -----------------cert:dump: cert tutorial-CA.crt in /home/nmsadm/.snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xa (CA+remote_peer)cert:dump: cert snmpd.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (
 identity+remote_peer)cert:dump: cert manager.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert managerold.crt in /usr/local/share/snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert tutorial-agent.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x2 (remote_peer)cert:dump: cert tutorial-joecool.crt in /home/nmsadm/.snmp/tls/certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0x3 (identity+remote_peer)cert:dump: cert hostname.example.com.crt in /usr/local/share/snmp/tls/ca-certscert:dump:&nbsp;&nbsp;&nbsp; type 1 flags 0xb (CA+identity+remote_peer)cert:dump: key hostname.example.com.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 f
 lags 0x1 (identity)cert:dump: key managerold.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key snmpd.key in /usr/local/share/snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: key tutorial-joecool.key in /home/nmsadm/.snmp/tls/privatecert:dump:&nbsp;&nbsp;&nbsp; type 4 flags 0x1 (identity)cert:dump: ------------------------ End ----------------------tsm: TSM: Reached our session initialization callbacktsm: Starting TSM processingtsm: TSM processing completed.

Sending 69 bytes to UDP: [127.0.0.1]:161-&gt;[0.0.0.0]:00000: 30 43 02 01&nbsp; 03 30 11 02&nbsp; 04 4D 47 B7&nbsp; 89 02 03 00&nbsp;&nbsp;&nbsp; 0C...0...MG.....0016: FF E3 04 01&nbsp; 04 02 01 04&nbsp; 04 00 30 29&nbsp; 04 05 80 00&nbsp;&nbsp;&nbsp; ..........0)....0032: 00 00 06 04&nbsp; 00 A0 1E 02&nbsp; 04 50 5B DC&nbsp; E6 02 01 00&nbsp;&nbsp;&nbsp; .........P[.....0048: 02 01 00 30&nbsp; 10 30 0E 06&nbsp; 0A 2B 06 01&nbsp; 06 03 0A 02&nbsp;&nbsp;&nbsp; ...0.0...+......0064: 01 01 00 05&nbsp; 00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; .....

failed rfc5343 contextEngineID probingsnmpget: Timeout (Sub-id not found: (top) -&gt; sysContact)&nbsp;server@visakha&gt;










Can you please help us in trouble shooting the issue and proceed further.

Thanks in advance.Regards

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.