Hello,
I have a device (debien/arm) that has been running fine under
net-snmp 5.7.3. An external audit recommended upgrading to 5.8, so wanting
to avoid a black mark on the report I am attempting to upgrade it.
First of all, I wonder if any guide exists / common gotchas around moving
to 5.8?
The error I'm getting is Decryption Error below.
# snmpget -v 3 -n "" -u USRENAME -a SHA -A "AUTHPASS" -x AES -X "ENCPASS"
-l authPriv localhost system.sysContact.0
snmpget: Decryption error (Sub-id not found: (top) -> system)
On the 5.7.3 device it works fine..
SNMPv2-MIB::sysContact.0 = STRING: @company.local
The SHA authentication is working because if I change that password I get
an auth error.
The system does have OpenSSL 1.1.0f (25 May 2017)
So I built without and with internal support for OpenSSL but get the same
error messag ether way?
./configure --with-defaults --with-ldflags=-Bstatic --disable-embedded-perl
--disable-perl-cc-checks --without-perl-modules --host=arm-linux
---------------------------------------------------------
Net-SNMP configuration summary:
---------------------------------------------------------
SNMP Versions Supported: 1 2c 3
Building for: linux
Net-SNMP Version: 5.8
Network transport support: Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6
IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base
SNMPv3 Security Modules: usm
Agent MIB code: default_modules => snmpv3mibs mibII ucd_snmp
notification notification-log-mib target agent_mibs agentx disman/event
disman/schedule utilities host
MYSQL Trap Logging: unavailable
Embedded Perl support: disabled
SNMP Perl modules: disabled
SNMP Python modules: disabled
Crypto support from: crypto
Authentication support: MD5 SHA1 SHA512 SHA384 SHA256 SHA192
Encryption support: DES AES
Local DNSSEC validation: disabled
---------------------------------------------------------
./configure --with-defaults --with-openssl=internal --with-ldflags=-Bstatic
--disable-embedded-perl --disable-perl-cc-checks --without-perl-modules
--host=arm-linux
---------------------------------------------------------
Net-SNMP configuration summary:
---------------------------------------------------------
SNMP Versions Supported: 1 2c 3
Building for: linux
Net-SNMP Version: 5.8
Network transport support: Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6
IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base
SNMPv3 Security Modules: usm
Agent MIB code: default_modules => snmpv3mibs mibII ucd_snmp
notification notification-log-mib target agent_mibs agentx disman/event
disman/schedule utilities host
MYSQL Trap Logging: unavailable
Embedded Perl support: disabled
SNMP Perl modules: disabled
SNMP Python modules: disabled
Crypto support from: internal
Authentication support: MD5 SHA1
Encryption support: DES AES
Local DNSSEC validation: disabled
---------------------------------------------------------
Thanks
David
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
