Description of problem:

snmp3 function calls in PHP 8 under CentOS 9 Stream x86_64 using the snmp3 options "authPriv" or "authNoPriv" immediately return "false" without any error message and without sending any traffic to destination host. This is true whether the auth protocol is "SHA" or "MD5". This problem does not occur for "noAuthNoPriv" PHP 8 snmp3 function calls against the same target host, nor from the same server using the standalone snmpwalk utility with "authPriv" or "authNoPriv" snmp3 options against the same target host, so it seems to potentially be related to the PHP 8 snmp3 crypto integration.

example calls with the immediate return of "false" with no error message:

snmp3_get([host], [user], 'authPriv', 'SHA', '[auth_pw]', 'AES', '[priv_pw]', [mib])

snmp3_walk([host], [user], 'authPriv', 'SHA', [auth_pw], 'AES', [priv_pw]', [mib]));

snmp3_real_walk([host], [user], 'authPriv', 'SHA', [auth_pw], 'AES', [priv_pw], [mib]);


Version-Release number of selected component (if applicable):

CentOS Version: 9 Stream
uname: Linux [hostname] 5.14.0-101.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Fri May 27 10:28:26 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
php: php-8.0.13-1.el9.x86_64
php-snmp: php-snmp-8.0.13-1.el9.x86_64
openssl: openssl-3.0.1-18.el9.x86_64
net-snmp: net-snmp-5.9.1-7.el9.x86_64
net-snmp-libs: net-snmp-libs-5.9.1-7.el9.x86_64

How reproducible:


Steps to Reproduce:

1. Install CentOS Stream 9 x86_64

2. Install PHP and PHP-SNMP plus any supporting PHP and SNMP packages to same versions as listed in "Version-Release" section

3. Ensure any dependent crypto libraries are installed

4. Ensure PHP error display is enabled and will show all errors

5. Make calls to snmp3 PHP functions such as snmp3_get, snmp3_walk, or snmp3_real_walk with the "authPriv" or "authNoPriv" options and a valid list of values replacing the field tokens from the function calls in the "Description of problem" section. Assign the return value to a variable and dump variable value to confirm it is "false". Record network traffic to confirm that no traffic is sent to target host prior to "false" return with no error message.

Actual results:

When all function fields are valid and the function should otherwise work as it did in PHP 7, snmp3 calls as detailed in "Description of problem" immediately return "false" and do not provide any error message, but only in the case where "authPriv" or "authNoPriv" is specified and auth will be used. No traffic is sent to SNMP target host prior to "false" return.


Expected results:

When there are no syntax or other issues with the snmp3 function calls, the calls should at least send traffic to the target host to begin the snmp3 polling process. If no error, then an array of return results should be provided. If a legitimate error is encountered then an error message should be provided.


Additional info:

  The same calls work fine on a Ubuntu server 22.04 x86_64 set-up running PHP 8.1.2-1 and the following packages:

php-snmp/jammy,now 2:8.1+92ubuntu1 all
php/jammy,now 2:8.1+92ubuntu1 all
php8.1-snmp/jammy-updates,jammy-security,now 8.1.2-1ubuntu2.1 amd64
openssl/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.6 amd64
libsnmp-base/jammy-updates,now 5.9.1+dfsg-1ubuntu2.1 all
libsnmp40/jammy-updates,now 5.9.1+dfsg-1ubuntu2.1 amd64

  Anecdotally, this same issue was seen within the Red Hat family after performing an inline upgrade from Fedora 34 x86_64 (PHP 7) where PHP snmp3 function calls were working, to Fedora 35 x86_64 (PHP 8).