Port to net-snmp without DES support (#1958073)

Related: #1958073
This commit is contained in:
Florian Weimer 2021-06-16 11:14:56 +02:00
parent bcbd68c1ee
commit aa2ac4b1fb
2 changed files with 40 additions and 1 deletions

View File

@ -0,0 +1,35 @@
This patch is required because net-smp is not build with DES support,
so usmDESPrivProtocol is not available.
diff --git a/plugins/snmp_bc/snmp_bc_session.c b/plugins/snmp_bc/snmp_bc_session.c
index 767cdb1a77ee420e..cb724fcee0668bd5 100644
--- a/plugins/snmp_bc/snmp_bc_session.c
+++ b/plugins/snmp_bc/snmp_bc_session.c
@@ -239,23 +239,10 @@ void *snmp_bc_open(GHashTable *handler_config,
err("Cannot find \"privacy_passwd\" configuration parameter.");
return NULL;
}
-
- custom_handle->session.securityLevel = SNMP_SEC_LEVEL_AUTHPRIV;
- custom_handle->session.securityPrivProto = usmDESPrivProtocol;
- custom_handle->session.securityPrivProtoLen = USM_PRIV_PROTO_DES_LEN;
- custom_handle->session.securityPrivKeyLen = USM_PRIV_KU_LEN;
- if (generate_Ku(custom_handle->session.securityAuthProto,
- custom_handle->session.securityAuthProtoLen,
- (u_char *) privacy_passwd, strlen(privacy_passwd),
- custom_handle->session.securityPrivKey,
- &(custom_handle->session.securityPrivKeyLen)) != SNMPERR_SUCCESS) {
- snmp_perror("snmp_bc");
- snmp_log(LOG_ERR,
- "Error generating Ku from private passphrase.\n");
- err("Unable to establish SNMP authpriv session.");
- return NULL;
- }
-
+ snmp_perror("snmp_bc");
+ snmp_log(LOG_ERR, "DES authentication is not supported.\n");
+ err("Unable to establish SNMP authpriv session.");
+ return NULL;
}

View File

@ -1,7 +1,7 @@
Summary: Hardware Platform Interface library and tools Summary: Hardware Platform Interface library and tools
Name: openhpi Name: openhpi
Version: 3.8.0 Version: 3.8.0
Release: 17%{?dist} Release: 18%{?dist}
License: BSD License: BSD
URL: http://www.openhpi.org URL: http://www.openhpi.org
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz
@ -12,6 +12,7 @@ Patch2: %{name}-3.7.0-multilib.patch
Patch3: %{name}-3.8.0-manpage-scan.patch Patch3: %{name}-3.8.0-manpage-scan.patch
Patch4: %{name}-3.8.0-ipv6-ipmidirect.patch Patch4: %{name}-3.8.0-ipv6-ipmidirect.patch
Patch5: %{name}-3.8.0-link-libopenhpi.patch Patch5: %{name}-3.8.0-link-libopenhpi.patch
Patch6: openhpi-snmp-disable-des.patch
BuildRequires: make BuildRequires: make
BuildRequires: gcc-c++ BuildRequires: gcc-c++
%if 0%{?fedora} || 0%{?rhel} < 9 %if 0%{?fedora} || 0%{?rhel} < 9
@ -152,6 +153,9 @@ make check
%changelog %changelog
* Wed Jun 16 2021 Florian Weimer <fweimer@redhat.com> - 3.8.0-18
- Port to net-snmp without DES support (#1958073)
* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 3.8.0-17 * Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 3.8.0-17
- Rebuilt for RHEL 9 BETA for openssl 3.0 - Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065 Related: rhbz#1971065