RE: Re: Encryption Support Not Enabled

This was a very good suggestion to rule out issues with the OpenSSL version I was using, but unfortunately, it didn’t resolve the problem.

From: Damien Garcia [mailto:[email protected]]
Sent: Monday, September 10, 2018 1:56 AM
To: Cecilia Newell <[email protected]>
Subject: [External] Re: Encryption Support Not Enabled

Hello,
I think I faced the same issue. I have solved it using "--with-openssl=internal' to compile the package.
Then, you can check the internal crypto is enabled using following command:
snmpd -H" that should return : "defPrivType              DES|AES"
Best Regards,
Damien Garcia



Le mer. 5 sept. 2018 à 19:23, Cecilia Newell <[email protected]<mailto:[email protected]>> a écrit :
I have an snmpwebcard with an embedded SNMP agent for a Tripp Lite PDU. I am trying to monitor the PDU using net-snmp 5.7.2, which I have built with OpenSSL version 0.9.8r, using Visual Studio 2008, on Windows 7.

Command for the build configure was: perl Configure --with-sdk --with-ssl --config=release --linktype=dynamic --prefix=”C:/usr”
No issues with the build.

I move the binaries to a Windows 2008 server in order to have visibility to the PDU. OpenSSL 0.9.8r has been installed on this machine and PATH updated to point to the exe.

When I run: snmpget -v 3 -u localadmin -l authPriv -a MD5 -A localadmin -x DES -X localadmin <IP of PDU> <OID>
The result is: Encryption support not enabled. Snmpget: USM encryption error

IP and OID are just fine, as V1 and v2 snmpget commands work and I get PDU status.
Checking the tripp lite settings, the SNMP V3 protocol has been configured with User Name: localadmin, Password: localadmin, Auth Password: localadmin, Facility Permissions: DEFAULT FACILITY = Read Write

Could the problem be that I’m not running the net-snmp daemon?  Could OpenSSL be installed incorrectly on the 2008 server? Has anyone had success running snmp v3 requests using net-snmp for an snmpwebcard agent? Any ideas for what else to try?

Thanks,
Cecilia

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot_______________________________________________
Net-snmp-users mailing list
[email protected]<mailto:[email protected]>
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users