[Patch] Add support for digests detected from ECC certificates

Bug #1912964 reported by Graham Leggett
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
net-snmp (Ubuntu)
Triaged
Wishlist
Unassigned

Bug Description

Previously, the digest could be detected on RSA certificates only. This
patch adds detection for ECC certificates.

https://github.com/net-snmp/net-snmp/issues/258

https://github.com/net-snmp/net-snmp/commit/a1968db524e087a36a19a351b89bf6f1633819aa

Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

Thanks for taking the time to file this bug and trying to make Ubuntu better.

Does upstream have any plan to release this feature? Since this is a new feature (not a bug fix) I am setting the importance to Wishlist, and it will be included in the Ubuntu development release as soon as upstream releases a new version containing it.

Changed in net-snmp (Ubuntu):
importance: Undecided → Wishlist
status: New → Triaged
Revision history for this message
Graham Leggett (minfrin-y) wrote :

Upstream have accepted and committed the following patch:

https://github.com/net-snmp/net-snmp/commit/a1968db524e087a36a19a351b89bf6f1633819aa

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

I tend to agree with Lucas that this is a wishlist bug. As such, it's better if we wait until upstream makes a new release and Debian picks up this patch, which will then mean that Ubuntu will also have the patch when the next merge is done.

I don't think we should backport this to Impish because of the above. If, during the next cycle (LTS), we notice that Debian will not have this feature available in time, then we can reassess the need to backport it.

Revision history for this message
Graham Leggett (minfrin-y) wrote :

I understand this was released in net-snmpd v5.9.1 in May 2021.

Revision history for this message
Paride Legovini (paride) wrote :

I don't think that's the case: v5.9.1 has been cut from the V5-9-patches upstream branch [1], which doesn't include the commit you identified as implementing support for ECC certificates.

I agree with Sergio in that we shouldn't backport this to Ubuntu, at least not during this development cycle. The feature hasn't even been released in any upstream release after all.

[1] https://github.com/net-snmp/net-snmp/tree/V5-9-patches

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.