Re: v3 AES support in 5.4.1

On Thu, Mar 27, 2008 at 8:48 AM, Qing <qingli_canada@yahoo.com> wrote:
> Hi,
> 5.4.1 is said to support AES, but the following command shows the snmpget does not even take
> AES as a valid parameter??
> I recompiled the source code on Solaris 9, with OpenSSL with AES support.
>
> localhost_sys:> /opt/net-snmp-new/bin/snmpget -v 3 -u qing -l authpriv -a SHA -A authpassword -x
> AES -X privpassword localhost:4444 sysUpTime
> Invalid privacy protocol specified after -x flag: AES

That command line looks okay to me, and a very similar command works
on my Linux system with net-snmp 5.4.1. I compiled net-snmp against
openssl 0.98b. I can confirm that "AES" is the correct way to specify
that you want use AES.

I suspect that when you compiled HAVE_AES was not defined to 1 for
some reason. Maybe your version of openssl is too old? If you look
in config.log after configuring net-snmp do you see lines that looks
like "#define HAVE_AES_CFB128_ENCRYPT 1" and "#define
HAVE_OPENSSL_AES_H 1"? If not, you need to figure out why not.

Nathan

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216...et/marketplace
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users