Bug 347711

Summary: Port net-snmp to use NSS library for cryptography
Product: [Fedora] Fedora Reporter: Peter Vrabec <pvrabec>
Component: net-snmpAssignee: Jan Safranek <jsafrane>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: bob.lord, mhlavink, tmraz
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-01 08:18:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 333741    

Description Peter Vrabec 2007-10-23 10:21:07 UTC
net-snmp should be ported to use NSS library for cryptography.
See the tracking bug for details and links on how it could be done.

Comment 1 John Poelstra 2008-08-12 04:01:56 UTC
triaged

Comment 2 Bob Lord 2008-08-27 20:57:44 UTC
What cryptography does SNMP require?

Comment 3 Jan Safranek 2008-08-28 07:16:14 UTC
(In reply to comment #2)
> What cryptography does SNMP require?

See rfc 3414.

Comment 4 Bob Lord 2008-08-28 15:30:29 UTC
It looks like it just needs DES in CBC mode.  Is that the only encryption it needs?  

Does it do any other PKI operations like digital signing?

Comment 5 Bob Lord 2008-08-29 15:44:50 UTC
What about RFC 3826? Is that mode supported in Fedora/RHEL?

Comment 6 Jan Safranek 2008-09-03 08:32:38 UTC
(In reply to comment #5)
> What about RFC 3826? Is that mode supported in Fedora/RHEL?

Yes, it is. It would be best if you looked into the sources by yourself (there is no list of supported RFCs). You can look into the sources by yourself, or look at what symbols it uses from openssl.

Comment 7 Jan Safranek 2014-09-01 08:18:02 UTC
I think it's time to close this bug. I personally think that NSS has all the necessary features, we just miss the code. Patches are welcome upstream.