This should have been opened against net-snmp, and not nagios-plugins, right? I'm reassigning it to the proper package.
It seems to me that it's a valid bug, but it would be great to have a more detailed reproducer. I tried editing /etc/ssl/openssl.cnf and extend the "usr_cert" extension's "nsComment" field to a string that is really long. Then, I generated a self-signed x509 certificate using the "usr_cert" extension:
Thanks for the bug report.
This should have been opened against net-snmp, and not nagios-plugins, right? I'm reassigning it to the proper package.
It seems to me that it's a valid bug, but it would be great to have a more detailed reproducer. I tried editing /etc/ssl/ openssl. cnf and extend the "usr_cert" extension's "nsComment" field to a string that is really long. Then, I generated a self-signed x509 certificate using the "usr_cert" extension:
# openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -extensions usr_cert
Then I edited /etc/snmp/ snmpd.conf and included a "localCert" parameter there:
[snmp] localCert /usr/local/ share/ca- certificates/ cert.crt
Finally, restarting the snmpd.service doesn't seem to trigger the bug. I wonder what I'm doing wrong here... Pointers and advices are appreciated.
Thanks.