|
Dear
All,
The error when run nessus happens as follows: If I run "nessusd" it says"*** 'ca_file' is not set - did you run nessus-mkcert ?" then exit. So I run "nessus-mkcert -q" or "nessus-mkcert" and answers the questions one-by-one. However, either way give the following output: "An error occured while generating the certificates and/or keys ! Do you want to save openssl output in a file for further analysis ? (y/n) [y] y Where should I save this file ? [/root/openssl-output]" When I do "less /root/openssl-output", output is as follows: ****************************************************************************************************************** Generating RSA private key, 1024 bit long modulus .....................++++++ ..................................................................................... .++++++ e is 65537 (0x10001) Using configuration from /tmp/nessus-mkcert.35963/std.cnf You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [FR]:State or Province Name (full name) [Some-State]:Loc ality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:O rganizational Unit Name (eg, section) []:Common Name (eg, your name or your server's hostname) []:Email Address []:Generating RSA private key, 1024 bit long modulus ....................................++++++ .....................++++++ e is 65537 (0x10001) Using configuration from /tmp/nessus-mkcert.35963/std.cnf You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [FR]:State or Province Name (full name) [Some-State]:Loc ality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:O rganizational Unit Name (eg, section) []:Common Name (eg, your name or your server's hostname) []:Email Address []:Using configuration from /tmp/nessus-mkcert.35963/std.c nf Check that the request matches the signature Signature ok The Subjects Distinguished Name is as follows countryName :PRINTABLE:'FR' stateOrProvinceName :PRINTABLE:'none' localityName :PRINTABLE:'Paris' organizationName :PRINTABLE:'Nessus Users United' organizationalUnitName:PRINTABLE:'Server certificate for ' emailAddress :IA5STRING:'nessusd@' The commonName field needed to be supplied and was missing *************************************************************************************************************************** It sounds the error is caused because I did not provide the commonName field , but actaully when I run "nessus-mkcert" if it don't even ask me for that. I have been strgguling to install nessus 2.0.9 to my FreeBSD 5.0. OpenSSL version is 9.6.g Everything goes fine when i run " nessus-installer.sh" except it says "cannot find libnet-config". However, I belive this should have nothing to do with the error occurred. I was pretty frustrated about this, any help or tips will be highly appreciated! cheers Tao |
_______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
