Comment 1 for bug 1912389

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

Thanks for the bug report.

This should have been opened against net-snmp, and not nagios-plugins, right? I'm reassigning it to the proper package.

It seems to me that it's a valid bug, but it would be great to have a more detailed reproducer. I tried editing /etc/ssl/openssl.cnf and extend the "usr_cert" extension's "nsComment" field to a string that is really long. Then, I generated a self-signed x509 certificate using the "usr_cert" extension:

# openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -extensions usr_cert

Then I edited /etc/snmp/snmpd.conf and included a "localCert" parameter there:

[snmp] localCert /usr/local/share/ca-certificates/cert.crt

Finally, restarting the snmpd.service doesn't seem to trigger the bug. I wonder what I'm doing wrong here... Pointers and advices are appreciated.

Thanks.