Re: [SNMP4J] Using TLS for SNMPv3

2017-11-14 Thread Frank Fock
Hi Nick, The most important question is: Does the server implement RFC5590, 5591, 6353 and did you configure the manager side (SNMP4J) accordingly. If both sides are consistently setup and configured according to those RFCs, then it will work. (I know this statement does not help much, but I h

Re: [SNMP4J] Using TLS for SNMPv3

2017-11-14 Thread Nick Chang
Hi Frank, Thanks very much for the quick response. Currently I am just in the researching phase to verify the functionality of snmp4j over TLS. I can envision that there will be definitely some sort of certificate management scheme for the devices on the server side. At the moment, the two iss

Re: [SNMP4J] Using TLS for SNMPv3

2017-11-14 Thread Frank Fock
Hi Nick, When using TLSTM, you are not doing TLS alone. TLSTM is integrated to the SNMPv3 transport model and uses the security name too. Thus, the security name you use in SNMP, is mapped to the certificates (roughly). For this mapping, more than one approach exists. Is that supported (TLSTM i

Re: [SNMP4J] Using TLS for SNMPv3

2017-11-14 Thread Nick Chang
Hi Frank, I made some further progress by importing DeviceCert into the keystore and then also corrected the subject name is the call securityCallback.addAcceptedSubjectDN(). Now I can see the SSL handshaking successful. However, I still experience following two issues: 1. Occasionally, the h

Re: [SNMP4J] Using TLS for SNMPv3

2017-11-14 Thread Nick Chang
Hi Frank, Thanks for your reply. I did use “System.setProperty("javax.net.debug", "all");” to view the handshaking traffic between the device and the client. I found out that I need to add the following lines to get it working with Java 1.8 since it supports TLSv1.2 by default Stri