* Re: [ptxdist] [PATCH v2] net-snmp: Improved SNMPv3 authentication and privacy support.
2014-02-24 12:44 ` [ptxdist] [PATCH v2] net-snmp: Improved SNMPv3 authentication and privacy support Bruno Thomsen
@ 2014-03-06 18:20 ` Michael Olbrich
0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2014-03-06 18:20 UTC (permalink / raw)
To: ptxdist
On Mon, Feb 24, 2014 at 01:44:24PM +0100, Bruno Thomsen wrote:
> Enabled SHA authentication and AES privacy (encryption) using OpenSSL.
> Upgraded from libnl1 to libnl3 dependency.
> Disable minimal agent when privacy is enabled.
>
> Tested SNMPv3 with USM (User-based Security Model) SHA auth + AES priv, minimal agent option disabled.
Ups, I looked at the wrong patch. This one is mostly ok too, but my point
about libnl3 remains.
Michael
> Signed-off-by: Bruno Thomsen <bth@kamstrup.dk>
> ---
> rules/net-snmp.in | 13 ++++++++++++-
> rules/net-snmp.make | 4 ++--
> 2 files changed, 14 insertions(+), 3 deletions(-)
>
> diff --git a/rules/net-snmp.in b/rules/net-snmp.in
> index 9821328..052e59e 100644
> --- a/rules/net-snmp.in
> +++ b/rules/net-snmp.in
> @@ -5,8 +5,10 @@ menuconfig NET_SNMP
> select LIBC_M
> select GCCLIBS_GCC_S if NET_SNMP_AGENT
> select LIBC_DL if NET_SNMP_AGENT || NET_SNMP_APPLICATIONS
> - select LIBNL if NET_SNMP_AGENT || NET_SNMP_APPLICATIONS
> + select LIBNL3 if NET_SNMP_AGENT || NET_SNMP_APPLICATIONS
> select LM_SENSORS if NET_SNMP_MIB_MODULES_LM_SENSORS
> + select OPENSSL if NET_SNMP_SHA_AES
> + select NET_SNMP_PRIVACY if NET_SNMP_SHA_AES || NET_SNMP_DES
>
> if NET_SNMP
>
> @@ -174,6 +176,7 @@ endchoice
> config NET_SNMP_MINI_AGENT
> bool
> default y
> + depends on ! NET_SNMP_PRIVACY
> prompt "minimal agent"
>
> config NET_SNMP_AGENT
> @@ -200,6 +203,10 @@ config NET_SNMP_SNMPV2C
> bool
> prompt "support for SNMPv2c"
>
> +config NET_SNMP_PRIVACY
> + bool
> + prompt "support for privacy (encryption)"
> +
> config NET_SNMP_DES
> bool
> prompt "DES encryption"
> @@ -208,6 +215,10 @@ config NET_SNMP_MD5
> bool
> prompt "MD5 authentication"
>
> +config NET_SNMP_SHA_AES
> + bool
> + prompt "SHA authentication and AES encryption"
> +
> config NET_SNMP_DOM_SOCK_ONLY
> bool "Disable UDP/TCP transports for agentx" if NET_SNMP_AGENT
> default y
> diff --git a/rules/net-snmp.make b/rules/net-snmp.make
> index 6bdecd8..6ddb954 100644
> --- a/rules/net-snmp.make
> +++ b/rules/net-snmp.make
> @@ -47,7 +47,7 @@ NET_SNMP_AUTOCONF := \
> $(GLOBAL_IPV6_OPTION) \
> --with-defaults \
> --disable-manuals \
> - --without-openssl \
> + --$(call ptx/wwo, PTXCONF_NET_SNMP_SHA_AES)-openssl \
> --with-mib-modules="$(NET_SNMP_MIB_MODULES-y)" \
> --with-out-mib-modules="$(NET_SNMP_MIB_MODULES-)" \
> --with-mibs=$(PTXCONF_NET_SNMP_DEFAULT_MIBS) \
> @@ -58,7 +58,7 @@ NET_SNMP_AUTOCONF := \
> --disable-embedded-perl \
> --without-perl-modules \
> --disable-static \
> - --disable-privacy \
> + --$(call ptx/endis, PTXCONF_NET_SNMP_PRIVACY)-privacy \
> --disable-internal-md5 \
> --$(call ptx/endis, PTXCONF_NET_SNMP_DOM_SOCK_ONLY)-agentx-dom-sock-only \
> --enable-mib-config-checking \
> --
> 1.7.9.5
>
>
> --
> ptxdist mailing list
> ptxdist@pengutronix.de
>
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 2+ messages in thread