diff --git a/openhpi-snmp-disable-des.patch b/openhpi-snmp-disable-des.patch new file mode 100644 index 0000000..8280e86 --- /dev/null +++ b/openhpi-snmp-disable-des.patch @@ -0,0 +1,35 @@ +This patch is required because net-smp is not build with DES support, +so usmDESPrivProtocol is not available. + +diff --git a/plugins/snmp_bc/snmp_bc_session.c b/plugins/snmp_bc/snmp_bc_session.c +index 767cdb1a77ee420e..cb724fcee0668bd5 100644 +--- a/plugins/snmp_bc/snmp_bc_session.c ++++ b/plugins/snmp_bc/snmp_bc_session.c +@@ -239,23 +239,10 @@ void *snmp_bc_open(GHashTable *handler_config, + err("Cannot find \"privacy_passwd\" configuration parameter."); + return NULL; + } +- +- custom_handle->session.securityLevel = SNMP_SEC_LEVEL_AUTHPRIV; +- custom_handle->session.securityPrivProto = usmDESPrivProtocol; +- custom_handle->session.securityPrivProtoLen = USM_PRIV_PROTO_DES_LEN; +- custom_handle->session.securityPrivKeyLen = USM_PRIV_KU_LEN; +- if (generate_Ku(custom_handle->session.securityAuthProto, +- custom_handle->session.securityAuthProtoLen, +- (u_char *) privacy_passwd, strlen(privacy_passwd), +- custom_handle->session.securityPrivKey, +- &(custom_handle->session.securityPrivKeyLen)) != SNMPERR_SUCCESS) { +- snmp_perror("snmp_bc"); +- snmp_log(LOG_ERR, +- "Error generating Ku from private passphrase.\n"); +- err("Unable to establish SNMP authpriv session."); +- return NULL; +- } +- ++ snmp_perror("snmp_bc"); ++ snmp_log(LOG_ERR, "DES authentication is not supported.\n"); ++ err("Unable to establish SNMP authpriv session."); ++ return NULL; + } + + diff --git a/openhpi.spec b/openhpi.spec index efd4416..2a4e80c 100644 --- a/openhpi.spec +++ b/openhpi.spec @@ -1,7 +1,7 @@ Summary: Hardware Platform Interface library and tools Name: openhpi Version: 3.8.0 -Release: 17%{?dist} +Release: 18%{?dist} License: BSD URL: http://www.openhpi.org Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz @@ -12,6 +12,7 @@ Patch2: %{name}-3.7.0-multilib.patch Patch3: %{name}-3.8.0-manpage-scan.patch Patch4: %{name}-3.8.0-ipv6-ipmidirect.patch Patch5: %{name}-3.8.0-link-libopenhpi.patch +Patch6: openhpi-snmp-disable-des.patch BuildRequires: make BuildRequires: gcc-c++ %if 0%{?fedora} || 0%{?rhel} < 9 @@ -152,6 +153,9 @@ make check %changelog +* Wed Jun 16 2021 Florian Weimer - 3.8.0-18 +- Port to net-snmp without DES support (#1958073) + * Wed Jun 16 2021 Mohan Boddu - 3.8.0-17 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065