Package: torrus-common
Severity: normal
Tags: patch

SNMPv3 with AES privprotocol is broken in Torrus. 
Upstream fixed this here:
https://github.com/ssinyagin/torrus-newfeatures/commit/452db30873e30aeffbb0198e540dd1079ba7f4ba

Cheers,
        Christopher

-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
From: Christopher Huhn <c.h...@gsi.de>
Date: Thu, 5 Nov 2015 18:58:31 +0100
Subject: 20_fix_snmpv3_with_aes

---
 doc/xmlconfig.pod.in                    | 2 +-
 perllib/Torrus/Collector/SNMP_Params.pm | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/xmlconfig.pod.in b/doc/xmlconfig.pod.in
index 38e6161..bb2aae4 100644
--- a/doc/xmlconfig.pod.in
+++ b/doc/xmlconfig.pod.in
@@ -825,7 +825,7 @@ C<snmp-authpassword> must be defined too.
 
 =item * C<snmp-privprotocol>
 
-Optional privacy protocol for SNMPv3. Valid values: C<des>, C<aes128cfb>,
+Optional privacy protocol for SNMPv3. Valid values: C<des>, C<aes>,
 or C<3desede>. Default is C<des>.
 
 =item * C<snmp-timeout>
diff --git a/perllib/Torrus/Collector/SNMP_Params.pm b/perllib/Torrus/Collector/SNMP_Params.pm
index 65eb5f9..dbdd0c2 100644
--- a/perllib/Torrus/Collector/SNMP_Params.pm
+++ b/perllib/Torrus/Collector/SNMP_Params.pm
@@ -47,7 +47,7 @@ my %validatorLeafParams =
                                    '+snmp-privpassword' => undef,
                                    '+snmp-privprotocol' => {
                                        'des'       => undef,
-                                       'aes128cfb' => undef,
+                                       'aes'       => undef,
                                        '3desede'   => undef } } },
      'snmp-timeout'       => undef,
      'snmp-retries'       => undef,

Reply via email to