Re: snmpv3 Encryption Support

Amit

I use OpenSSL 0.9.8 which works fine, I'm not sure about 0.9.7. I had a
bit of trouble to get encryption enabled initially, using a version of
OpenSSL that was not native to the host machine, in the end I specified
an absolute path to the OpenSSL directory that contained the files
netSNMP needed for a shared lib build, ie:

--with-openssl=/home/colin/code/CVS/STX/openssl

> /home/colin/code/CVS/STX/openssl
> /home/colin/code/CVS/STX/openssl/include
> /home/colin/code/CVS/STX/openssl/include/openssl
> /home/colin/code/CVS/STX/openssl/include/openssl/ssl2.h
> /home/colin/code/CVS/STX/openssl/include/openssl/hmac.h
> ...
> /home/colin/code/CVS/STX/openssl/lib
> /home/colin/code/CVS/STX/openssl/lib/libssl.so.0.9.8
> /home/colin/code/CVS/STX/openssl/lib/libcrypto.so.0.9.8
> /home/colin/code/CVS/STX/openssl/lib/libz.so.1.2.3
> ....

The config.log file in the build directory will tell you where the
OpenSSL detection process is failing. Around the end of the log the
script will record the result of the checks for openssl support, the
failed command line and test program will be included, from this you
will be able to deduce where exactly the script is failing.

Hope this helps
Colin

On Wed, 2008-04-16 at 00:15 -0700, Amit Kumar wrote:
> Hi All,
>
> I am using net-snmp-5.4 version with snmpv3 support and i am using the openssl version openssl-0.9.7i .
>
> first i used openssl and from ./configure script i used the option --with-openssl=../openssl/ in that case i got the error "Asked to use OpenSSL but i couldn't find it."
>
> the i gave the path of ssl *.a files libssl.a and libcrypto.a files then this error is gone but in configuration summary Encryption is comming blank. please find the same :
>
> SNMP Versions Supported: 1 2c 3
> Net-SNMP Version: 5.4
> Building for: linux
> Network transport support: UDP
> SNMPv3 Security Modules: usm
> Agent Module list: mk/module_list_code.mk
> Agent MIB code: ucd-snmp/dlmod ucd-snmp/pass mibII default_modules => util_funcs mibII/system_mib mibII/sysORTable mibII/at mibII/ifTable mibII/ip mibII/snmp_mib mibII/tcp mibII/icmp mibII/udp mibII/vacm_vars mibII/setSerialNo if-mib ip-mib ip-forward-mib tcp-mib udp-mib
> Embedded Perl support: disabled
> SNMP Perl modules: disabled
> SNMP Python modules: disabled
> Authentication support: MD5
> Encryption support:
>
>
> and in config log file
>
> ac_cv_header_openssl_aes_h=no
> ac_cv_header_openssl_des_h=no
> ac_cv_header_openssl_dh_h=no
> ac_cv_header_openssl_evp_h=no
> ac_cv_header_openssl_hmac_h=no
> ac_cv_header_osreldate_h=no
>
> i think our net-snmp configure script is not able to get the defination of these flags from libcrypto library .. ?
> which version of openssl i have to use.. ?
> and from where i will get the patch for openssl-0.9.7i where these flags is defined ?
> or is there is any solution for that..?
>
> Thanks
> Amit
>
>
> __________________________________________________ _________
> Yahoo! For Good helps you make a difference
>
> http://uk.promotions.yahoo.com/forgood/
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
> Don't miss this year's exciting event. There's still time to save $100.
> Use priority code J8TL2D2.
> http://ad.doubleclick.net/clk;198757...un.com/javaone
> _______________________________________________
> Net-snmp-coders mailing list
> Net-snmp-coders@lists.sourceforge.net
> https://lists.sourceforge.net/lists/...et-snmp-coders


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757...un.com/javaone
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/...et-snmp-coders