[Pkg-net-snmp-devel] Bug#972985: snmp: Blumenthal AES encryption should be enabled by default

[Owen Evans]

Package: snmp
Version: 5.9+dfsg-3-silo
Severity: wishlist
X-Debbugs-Cc: oevans at sciencelogic.com

Dear Maintainer,

This is my first Debian issue report.

Blumenthal AES, in spite of being a 'draft' part of the SNMP Standard,
is becoming widely implemented by many vendors. It is the main way to
have strong encryption in connection with SNMPv3. Debian should include
the --enable-blumenthal-aes option added around line 53 of debian/rules
so that it is used when invoking the ./configure script from the
upstream source package.

My organization is patching the rules and building our own binaries in
order to enable this configuration, but I think this change would be
useful to the community at large too.

I would submit a patch myself but I can't easily figure out where/how to
do this.

Regards,
Owen Evans
ScienceLogic, Inc


-- System Information:
Debian Release: 10.6
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.15.0-91-generic (SMP w/4 CPU threads)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages snmp depends on:
ii  libc6         2.31-4
ii  libsnmp-base  5.9+dfsg-3-silo
ii  libsnmp40     5.9+dfsg-3-silo
ii  libssl1.1     1.1.1d-0+deb10u3

Versions of packages snmp recommends:
ii  perl  5.30.3-4

snmp suggests no packages.

-- no debconf information