On Thu, Feb 12, 2004 at 11:07:46AM -0600, John C. Welch wrote: > Okay, got the server up, got my client certs made. (MUCH thanks to Ben Derr) > > Now, I bring up the client under X11, but it wants a password for the > server. How do I set up the client so that I can use SSL?
1. Edit each client configuration file and make sure it contains the
following lines at or near the top:
trusted_ca = path/to/cacert.pem
nessusd_user = $user
cert_file = path/to/cert_$user.pem
key_file = path/to/key_$user.pem
where $user is the user as defined to the Nessus server. If no
configuration file already exists, create one as ~/.nessusrc.
2. Run nessus and try to connect to the server. You will likely be
prompted to choose a level of SSL paranoia (follow the on-screen
instructions) and to accept the server's SSL certificate.
By the way, note that the nessus client will still prompt you for a
password even if authenticating with a certificate. If you've encrypted
your private key, the client uses the password to decrypt your private
key; otherwise, you can supply any non-null string as a password as it
won't be used.
George
--
[EMAIL PROTECTED]
pgp00000.pgp
Description: PGP signature
_______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
