Date: Thu, 2 Jan 2003 22:23:19 -0500 (EST)
   From: "George A. Theall" <[EMAIL PROTECTED]>
   Cc: [EMAIL PROTECTED]

   On Mon, 30 Dec 2002 [EMAIL PROTECTED] wrote:

   > Maybe nessus
   > expects a password for the client somewhere, but I have not seen
   > where...

   Ok, I generated a complete set of certificates using OpenSSL and was
   able to reproduce the error you received.  And like you guessed, the
   resolution involves specifying the passphrase for the client's private
   key -- you enter that in the "Password:" field in the "Nesssud host" tab
   when you first start the nessus client.  Perhaps you've figured this out
   already.

No, I hadn't.  In fact, I had added the user with password
authentication, instead of cert.  Most of the problems I've had
logging in were traceable, with enough patience, back to this one
error.  (Your clue led me to the bizarre realization that the PEM
password for the client's key and the login had to be the same.  This
made no sense, until I realized that the reason I had two
client-related passwords floating around in the first place was that I
had specified password authentication when I added the user/client
(doh!).)

But anyway, I just finally managed to do a nessus session without SSL
errors (or any other error, for that matter).  Now I'm learning how to
interpret the results.

Thank you very, very much for your help.

KJ
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to