Configuring TLS in net-snmp v5.6.1.1

I am running net-snmp as an embedded application under CentOS.  I am using
v5.6.1.1 instead of v5.7.x because I was unable to bring up v5.7.x as an
embedded app.

I am having difficulty configuring net-snmp v5.6.1.1 for TLS.  I have
verified from the config.log that configure is being invoked with  the
“--with-security-modules=tsm --with-transports=DTLSUDP,TLSTCP” options per
the instructions at http://www.net-snmp.org/wiki/index.php/Using_DTLS.
My snmpd.conf contains



agentaddress udp:161

agentaddress udp6:161

agentaddress dtlsudp:10161

agentaddress tlstcp:10161

[snmp] serverCert /var/HSE/idevid_cert.pem

[snmp] defX509ServerPub /var/HSE/idevid_cert.pem

[snmp] defX509ServerPriv /var/HSE/idevid_key_pair.key

[snmp] clientCert /var/HSE/allPubCerts.crt

[snmp] defX509ClientPub /var/HSE/allPubCerts.crt

[snmpd]

setserialno 1681692777

engineBoots 1

oldEngineID 0x80001f888067458b6b9da39c52

createUser xyz SHA -l 0xe8479ddd8eb5831281d1321ae86cc8946a95d6b8 AES -l
0xe8479ddd8eb5831281d1321ae86cc894



But when I execvp snmpd I get the following output on stderr



/tmp/snmpd.conf: line 35: Warning: Unknown token: serverCert.

/tmp/snmpd.conf: line 36: Warning: Unknown token: defX509ServerPub.

/tmp/snmpd.conf: line 37: Warning: Unknown token: defX509ServerPriv.

/tmp/snmpd.conf: line 38: Warning: Unknown token: clientCert.

/tmp/snmpd.conf: line 39: Warning: Unknown token: defX509ClientPub.

getaddrinfo: dtlsudp Name or service not known

getaddrinfo("dtlsudp", NULL, ...): Name or service not known

Error opening specified endpoint "dtlsudp:10161"



I have also tried removing the tlstcp:10161 and dtlsudp:10161 from the
snmpd.conf and added it to the argument list in the execvp as tlstcp:10161
and dtlsudp:10161 but I get the same stderr output.



Are the instructions on the current web pages specific to net-snmp v5.7.x?
If so, what needs to be done to bring up tls support in 5.6.1.1?


Thank you for your consideration

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users