1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
import pytest
from pysnmp.hlapi.v3arch.asyncio import *
from pysnmp.proto.errind import DecryptionError, UnknownUserName, WrongDigest
from tests.agent_context import AGENT_PORT, AgentContextManager
@pytest.mark.asyncio
async def test_usm_sha_aes128():
async with AgentContextManager():
with SnmpEngine() as snmpEngine:
authData = UsmUserData(
"usr-sha-aes",
"authkey1",
"privkey1",
authProtocol=USM_AUTH_HMAC96_SHA,
privProtocol=USM_PRIV_CFB128_AES,
)
errorIndication, errorStatus, errorIndex, varBinds = await get_cmd(
snmpEngine,
authData,
await UdpTransportTarget.create(("localhost", AGENT_PORT), retries=0),
ContextData(),
ObjectType(ObjectIdentity("SNMPv2-MIB", "sysDescr", 0)),
)
assert errorIndication is None
assert errorStatus == 0
assert len(varBinds) == 1
assert varBinds[0][0].prettyPrint() == "SNMPv2-MIB::sysDescr.0"
isinstance(varBinds[0][1], OctetString)
@pytest.mark.asyncio
async def test_usm_sha_aes128_wrong_auth():
async with AgentContextManager():
with SnmpEngine() as snmpEngine:
authData = UsmUserData(
"usr-sha-aes",
"authkey1",
"privkey1",
authProtocol=USM_AUTH_HMAC96_MD5, # wrongly use usmHMACMD5AuthProtocol
privProtocol=USM_PRIV_CFB128_AES,
)
errorIndication, errorStatus, errorIndex, varBinds = await get_cmd(
snmpEngine,
authData,
await UdpTransportTarget.create(("localhost", AGENT_PORT), retries=0),
ContextData(),
ObjectType(ObjectIdentity("SNMPv2-MIB", "sysDescr", 0)),
)
assert isinstance(errorIndication, WrongDigest)
assert str(errorIndication) == "Wrong SNMP PDU digest"
@pytest.mark.asyncio
async def test_usm_sha_aes128_wrong_priv():
async with AgentContextManager():
with SnmpEngine() as snmpEngine:
authData = UsmUserData(
"usr-sha-aes",
"authkey1",
"privkey1",
authProtocol=USM_AUTH_HMAC96_SHA,
privProtocol=USM_PRIV_CBC56_DES, # wrongly use usmDESPrivProtocol
)
errorIndication, errorStatus, errorIndex, varBinds = await get_cmd(
snmpEngine,
authData,
await UdpTransportTarget.create(("localhost", AGENT_PORT), retries=0),
ContextData(),
ObjectType(ObjectIdentity("SNMPv2-MIB", "sysDescr", 0)),
)
assert isinstance(errorIndication, DecryptionError)
assert (
str(errorIndication)
== "Ciphering services not available or ciphertext is broken"
)
@pytest.mark.asyncio
async def test_usm_sha_aes128_wrong_user():
async with AgentContextManager():
with SnmpEngine() as snmpEngine:
authData = UsmUserData(
"usr-sha-aes-not-exist",
"authkey1",
"privkey1",
authProtocol=USM_AUTH_HMAC96_SHA,
privProtocol=USM_PRIV_CFB128_AES,
)
errorIndication, errorStatus, errorIndex, varBinds = await get_cmd(
snmpEngine,
authData,
await UdpTransportTarget.create(("localhost", AGENT_PORT), retries=0),
ContextData(),
ObjectType(ObjectIdentity("SNMPv2-MIB", "sysDescr", 0)),
)
assert isinstance(errorIndication, UnknownUserName)
assert str(errorIndication) == "Unknown USM user"
|
