netsnmp: enable tsm + DTLSUDP/TLSTCP with openssl
PATCH 1/1 netsnmp: enable tsm + DTLSUDP/TLSTCP with openssl
From: Gustavo Zacarias <[email protected]>
Otherwise the openssl support is basically unused.
net-snmp provides a stripped-down openssl implementation that can be used to enable tsm/DTLSUDP/TLSTCP but given it's security track record it's best to rely on the external one, it also saves space.
usm is the user validation module, it's default on, however when passing --with-security-modules we must keep it otherwise it won't be.
--- package/netsnmp/netsnmp.mk | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)
package/netsnmp/netsnmp.mk +3 -1
@@ -49,7 +49,9 @@ endif ifeq ($(BR2_PACKAGE_OPENSSL),y) NETSNMP_DEPENDENCIES += openssl NETSNMP_CONF_OPTS += \ - --with-openssl=$(STAGING_DIR)/usr/include/openssl + --with-openssl=$(STAGING_DIR)/usr/include/openssl \ + --with-security-modules="tsm,usm" \ + --with-transports="DTLSUDP,TLSTCP" ifeq ($(BR2_STATIC_LIBS),y) # openssl uses zlib, so we need to explicitly link with it when static NETSNMP_CONF_ENV += LIBS=-lz
Signature · 1 line
2.4.10
Thomas Petazzoni
AppliedPATCH 1/1 netsnmp: enable tsm + DTLSUDP/TLSTCP with openssl
Gustavo,
Quoted 8 lines · gustavo.zacarias at free-electrons.com
From: Gustavo Zacarias <[email protected]>
Otherwise the openssl support is basically unused.
net-snmp provides a stripped-down openssl implementation that can be used to enable tsm/DTLSUDP/TLSTCP but given it's security track record it's best to rely on the external one, it also saves space.
Quoted 7 lines
usm is the user validation module, it's default on, however when passing --with-security-modules we must keep it otherwise it won't be.
Signed-off-by Gustavo Zacarias <[email protected]>--- package/netsnmp/netsnmp.mk | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)
Applied, thanks.
Thomas
Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons Embedded Linux, Kernel and Android engineering http://free-electrons.com