Thanks for the bug report.

This should have been opened against net-snmp, and not nagios-plugins,
right?  I'm reassigning it to the proper package.

It seems to me that it's a valid bug, but it would be great to have a
more detailed reproducer.  I tried editing /etc/ssl/openssl.cnf and
extend the "usr_cert" extension's "nsComment" field to a string that is
really long.  Then, I generated a self-signed x509 certificate using the
"usr_cert" extension:

# openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days
365 -extensions usr_cert

Then I edited /etc/snmp/snmpd.conf and included a "localCert" parameter
there:

[snmp] localCert /usr/local/share/ca-certificates/cert.crt

Finally, restarting the snmpd.service doesn't seem to trigger the bug.
I wonder what I'm doing wrong here...  Pointers and advices are
appreciated.

Thanks.

** Package changed: nagios-plugins (Ubuntu) => net-snmp (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912389

Title:
   [Patch] SIGSEGV: crash when certificate contains extension longer
  than 512 bytes

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1912389/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to