Nessus 1.0.10 SSL certificate problem

[jeff gercken]

I’m having problems connecting to nessusd (1.0.10) and am looking for suggestions.

 

Error messages:

     NessusWX: Server doesn't have valid X.509 Certificate

     Nessus from cmd line:   SSL_CTX_load_verify_locations: error:02001002:system library:fopen:No such file or directory when trying to connect with.

Info:
OpenSSL 0.9.7c 30 Sep 2003
This is Nessus 1.0.10 for Linux 2.4.17 (Debian)
compiled with gcc version 2.95.4 20011223 (Debian prerelease)
    Current setup :
            Experimental session-saving    : enabled
            Experimental KB saving         : enabled
            Thread manager                 : fork
            Crypto layer                   : peks/0.8
            nasl                           : 1.0.10
            libnessus                      : 1.0.10
            Running as euid                : 0

 

What I've tried:

Recreating certificates with nessus-mkcert

Recreating certificates with openssl

Removing then recreating users

Explicitly pointing nessusd to nesssusd.conf

Creating and using client certificates

Using ssl2, ssl3 connection method

Reinstalling nessus from source.

 

Network conversation while trying to connect with NessusWX:

Frame 1
Internet Protocol, Src: Host, Dst: Server
Transmission Control Protocol, Src Port: 3906, Dst Port: 1241, Seq: 1226202240, Ack: 0, Len: 0

 

Frame 2
Internet Protocol, Src: Server, Dst: Host
Transmission Control Protocol, Src Port: 1241, Dst Port: 3906, Seq: 1472204045, Ack: 1226202241, Len: 0

 

Frame 3
Internet Protocol, Src: Host, Dst: Server
Transmission Control Protocol, Src Port: 3906, Dst Port: 1241, Seq: 1226202241, Ack: 1472204046, Len: 0

 

Frame 4
Internet Protocol, Src: Host, Dst: Server
Transmission Control Protocol, Src Port: 3906, Dst Port: 1241, Seq: 1226202241, Ack: 1472204046, Len: 90
Data (90 bytes) (part of packet removed for privacy)
0040  00 00 00 00 00 00 44 cf 32 00 c9 a5 2d 3b 3b bb   ......D.2...-;;.
0050  16 a1 08 2d 11 d9 df 53 96 c4 60 ce ab f3 33 b7   ...-...S..`...3.
0060  1a 00 00 2a 00 16 00 13 00 0a 00 66 00 07 00 05   ...*.......f....
0070  00 04 00 65 00 64 00 63 00 62 00 61 00 60 00 15   ...e.d.c.b.a.`..
0080  00 12 00 09 00 14 00 11 00 08 00 06 00 03 01 00   ................

Frame 5
Internet Protocol, Src: Server, Dst: Host
Transmission Control Protocol, Src Port: 1241, Dst Port: 3906, Seq: 1472204046, Ack: 1226202331, Len: 0

 

Frame 6
Internet Protocol, Src: Server, Dst: Host
Transmission Control Protocol, Src Port: 1241, Dst Port: 3906, Seq: 1472204046, Ack: 1226202331, Len: 0

 

Frame 7
Internet Protocol, Src: Host, Dst: Server
Transmission Control Protocol, Src Port: 3906, Dst Port: 1241, Seq: 1226202331, Ack: 1472204047, Len: 0

 

Frame 8
Internet Protocol, Src: Server, Dst: Host
Transmission Control Protocol, Src Port: 1241, Dst Port: 3906, Seq: 1472204047, Ack: 1226202331, Len: 0

 

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus