Hi Dave, check if the snmpd log file gives you any hint Regards Anders Wallin
On Thu, Mar 7, 2019 at 11:20 PM Dave C <dave....@gmail.com> wrote: > Hello, > > I have a device (debien/arm) that has been running fine under > net-snmp 5.7.3. An external audit recommended upgrading to 5.8, so wanting > to avoid a black mark on the report I am attempting to upgrade it. > > First of all, I wonder if any guide exists / common gotchas around moving > to 5.8? > > The error I'm getting is Decryption Error below. > > # snmpget -v 3 -n "" -u USRENAME -a SHA -A "AUTHPASS" -x AES -X "ENCPASS" > -l authPriv localhost system.sysContact.0 > snmpget: Decryption error (Sub-id not found: (top) -> system) > > On the 5.7.3 device it works fine.. > SNMPv2-MIB::sysContact.0 = STRING: @company.local > > The SHA authentication is working because if I change that password I get > an auth error. > > The system does have OpenSSL 1.1.0f (25 May 2017) > > So I built without and with internal support for OpenSSL but get the same > error messag ether way? > > > ./configure --with-defaults --with-ldflags=-Bstatic > --disable-embedded-perl --disable-perl-cc-checks --without-perl-modules > --host=arm-linux > > --------------------------------------------------------- > Net-SNMP configuration summary: > --------------------------------------------------------- > > SNMP Versions Supported: 1 2c 3 > Building for: linux > Net-SNMP Version: 5.8 > Network transport support: Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6 > IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base > SNMPv3 Security Modules: usm > Agent MIB code: default_modules => snmpv3mibs mibII ucd_snmp > notification notification-log-mib target agent_mibs agentx disman/event > disman/schedule utilities host > MYSQL Trap Logging: unavailable > Embedded Perl support: disabled > SNMP Perl modules: disabled > SNMP Python modules: disabled > Crypto support from: crypto > Authentication support: MD5 SHA1 SHA512 SHA384 SHA256 SHA192 > Encryption support: DES AES > Local DNSSEC validation: disabled > > --------------------------------------------------------- > > > ./configure --with-defaults --with-openssl=internal > --with-ldflags=-Bstatic --disable-embedded-perl --disable-perl-cc-checks > --without-perl-modules --host=arm-linux > > --------------------------------------------------------- > Net-SNMP configuration summary: > --------------------------------------------------------- > > SNMP Versions Supported: 1 2c 3 > Building for: linux > Net-SNMP Version: 5.8 > Network transport support: Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6 > IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base > SNMPv3 Security Modules: usm > Agent MIB code: default_modules => snmpv3mibs mibII ucd_snmp > notification notification-log-mib target agent_mibs agentx disman/event > disman/schedule utilities host > MYSQL Trap Logging: unavailable > Embedded Perl support: disabled > SNMP Perl modules: disabled > SNMP Python modules: disabled > Crypto support from: internal > Authentication support: MD5 SHA1 > Encryption support: DES AES > Local DNSSEC validation: disabled > > --------------------------------------------------------- > > > Thanks > > David > _______________________________________________ > Net-snmp-users mailing list > Net-snmp-users@lists.sourceforge.net > Please see the following page to unsubscribe or change other options: > https://lists.sourceforge.net/lists/listinfo/net-snmp-users >
_______________________________________________ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
