Problems upgrading 5.7.3 to 5.8

Hello,

I have a device (debien/arm) that has been running fine under
net-snmp 5.7.3. An external audit recommended upgrading to 5.8, so wanting
to avoid a black mark on the report I am attempting to upgrade it.

First of all, I wonder if any guide exists / common gotchas around moving
to 5.8?

The error I'm getting is Decryption Error below.

# snmpget -v 3 -n "" -u USRENAME -a SHA -A "AUTHPASS" -x AES -X "ENCPASS"
-l authPriv localhost system.sysContact.0
snmpget: Decryption error (Sub-id not found: (top) -> system)

On the 5.7.3 device it works fine..
SNMPv2-MIB::sysContact.0 = STRING: @company.local

The SHA authentication is working because if I change that password I get
an auth error.

The system does have OpenSSL 1.1.0f  (25 May 2017)

So I built without and with internal support for OpenSSL but get the same
error messag ether way?


./configure --with-defaults --with-ldflags=-Bstatic --disable-embedded-perl
--disable-perl-cc-checks --without-perl-modules --host=arm-linux

---------------------------------------------------------
            Net-SNMP configuration summary:
---------------------------------------------------------

  SNMP Versions Supported:    1 2c 3
  Building for:               linux
  Net-SNMP Version:           5.8
  Network transport support:  Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6
IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base
  SNMPv3 Security Modules:     usm
  Agent MIB code:            default_modules =>  snmpv3mibs mibII ucd_snmp
notification notification-log-mib target agent_mibs agentx disman/event
disman/schedule utilities host
  MYSQL Trap Logging:         unavailable
  Embedded Perl support:      disabled
  SNMP Perl modules:          disabled
  SNMP Python modules:        disabled
  Crypto support from:        crypto
  Authentication support:     MD5 SHA1 SHA512 SHA384 SHA256 SHA192
  Encryption support:         DES AES
  Local DNSSEC validation:    disabled

---------------------------------------------------------


./configure --with-defaults --with-openssl=internal --with-ldflags=-Bstatic
--disable-embedded-perl --disable-perl-cc-checks --without-perl-modules
--host=arm-linux

---------------------------------------------------------
            Net-SNMP configuration summary:
---------------------------------------------------------

  SNMP Versions Supported:    1 2c 3
  Building for:               linux
  Net-SNMP Version:           5.8
  Network transport support:  Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6
IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base
  SNMPv3 Security Modules:     usm
  Agent MIB code:            default_modules =>  snmpv3mibs mibII ucd_snmp
notification notification-log-mib target agent_mibs agentx disman/event
disman/schedule utilities host
  MYSQL Trap Logging:         unavailable
  Embedded Perl support:      disabled
  SNMP Perl modules:          disabled
  SNMP Python modules:        disabled
  Crypto support from:        internal
  Authentication support:     MD5 SHA1
  Encryption support:         DES AES
  Local DNSSEC validation:    disabled

---------------------------------------------------------


Thanks

David

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users