Hi!
I've tried to compile Nessus on a RedHat box with openssl 0.9.7.
nessusd -d gives:
This is Nessus 1.2.7 for Linux 2.4.9-31
compiled with gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98)
Current setup :
Experimental session-saving : enabled
Experimental KB saving : enabled
Thread manager : fork
nasl : 1.2.7
libnessus : 1.2.7
SSL support : enabled
SSL is used for client / server communication
Running as euid : 0
My /etc/nessus/nerssusd.conf
#
# Configuration file of the Nessus Security Scanner
# See the manpage for nessusd(8) for more information.
#
# Server options
plugins_folder = /usr/lib/nessus/plugins
logfile = /var/nessus/logs/nessusd.messages
max_threads = 50
users = /etc/nessus/nessusd.users
rules = /etc/nessus/nessusd.rules
language = english
#language = francais
checks_read_timeout = 5
ssl_version = SSLv3
# Crypto options
peks_username = nessusd
peks_keylen = 1024
peks_keyfile = /etc/nessus/nessusd.private-keys
peks_usrkeys = /etc/nessus/nessusd.user-keys
peks_pwdfail = 5
# Added by nessus-mkcert
#
cert_file=/usr/com/nessus/CA/servercert.pem
key_file=/var/nessus/CA/serverkey.pem
ca_file=/usr/com/nessus/CA/cacert.pem
# If you decide to protect your private key with a password,
# uncomment and change next line
# pem_password=password
# If you want to force the use of a client certificate, uncomment next line
# force_pubkey_auth = yes
I have done a nessus-mkcert, so the listed files exists:
-rw-r--r-- 1 root root 4357 Jan 14 23:00
/usr/com/nessus/CA/servercert.pem
-rw------- 1 root root 887 Jan 14 23:00
/var/nessus/CA/serverkey.pem
-rw-r--r-- 1 root root 1537 Jan 14 23:00
/usr/com/nessus/CA/cacert.pem
But when trying to connect from my client I get:
Nessus Console [Version 1.4.2] Ready
SSL library initialized
Connecting to server w.x.y.z (port 1241) using SSLv3 encrypted connection...
ERROR: Server doesn't have valid X.509 certificate
Any idea what the problem is - did I miss something in my configuration ??
Regards,
/Brian
