Greetings all,

I'm in charge of deploying three Nessus scanners on various production
networks, and was all set to deploy them using Nessus 2.2.0 when Tenable
decided to throw a wrench in the gears and force us to upgrade to 2.2.1 (at
least if we want to get plugin updates after Jan. 1st)... :(  I'm probably
not the only one that's a little less than pleased with this obvious grab
for cash on Tenable's part.  Of course, they develop great software and
deserve to make money from it...  It's just the whole changing the rules of
the game right in the middle of Sarbanes-Oxley and a ton of other security
initiatives that calls into question the timing of this move.  Putting
political BS aside for a moment, I'm having difficulty compiling the new
version on Solaris 9.  If anyone can help it would be greatly appreciated.

Compiling Nessus-core-2.2.1 on Solaris 9 (with Solaris Software Companion
GCC3) and all latest patches seems to fail when attempting to compile
nessus-fetch.  I have the CSW version of OpenSSL installed in /opt/csw
(/opt/csw/include and /opt/csw/lib).  Nessus-libraries compiles just fine
using this same version of OpenSSL.  Here is the relevant failure string:

make[1]: Entering directory
`/root/nessus-2.2.1-src/nessus-core/nessus-fetch'
/opt/sfw/gcc-3/bin/gcc -Wall -I. -I/root/nessus-2.2.1-src/nessus-core/includ
e   -I/usr/local/include/nessus -DNESSUS_ON_SSL -DHAVE_SSL -I/opt/csw/lib/in
clude  -I/usr/local/include/nessus  "-DNESSUSD_CONFDIR=\"/usr/local/etc\""
"-DNESSUSD_STATEDIR=\"/usr/local/var/nessus\""
"-DNESSUSD_DATADIR=\"/usr/local/etc/nessus\""
"-DNESSUSD_LIBDIR=\"/usr/local/lib/nessus\""
"-DNESSUSD_PLUGINS=\"/usr/local/lib/nessus/plugins\""
"-DNESSUSD_REPORTS=\"/usr/local/lib/nessus/reports\"" -DNESSUSD_SHAREDSTATED
IR=\"/usr/local/com/nessus\" -DNESSUSD_LOGDIR=\"/usr/local/var/nessus/logs\"
 -I. -I/root/nessus-2.2.1-src/nessus-core/include    -DHAVE_CONFIG_H   -DUSE
_GTK  -c nessus-fetch.c
In file included from nessus-fetch.c:25:
/root/nessus-2.2.1-src/nessus-core/include/includes.h:193:25: openssl/ssl.h:
No such file or directory
/root/nessus-2.2.1-src/nessus-core/include/includes.h:194:26:
openssl/x509.h: No such file or directory
In file included from
/root/nessus-2.2.1-src/nessus-core/include/includes.h:263,
                 from nessus-fetch.c:25:
/usr/local/include/nessus/libnessus.h:171: error: parse error before '*'
token
/usr/local/include/nessus/libnessus.h:407: error: parse error before '*'
token
/usr/local/include/nessus/libnessus.h:407: warning: type defaults to `int'
in declaration of `stream_get_server_certificate'
/usr/local/include/nessus/libnessus.h:407: warning: data definition has no
type or storage class
/usr/local/include/nessus/libnessus.h:419: error: parse error before "SSL"
nessus-fetch.c: In function `mkhostinfo':
nessus-fetch.c:424: error: `INADDR_NONE' undeclared (first use in this
function)
nessus-fetch.c:424: error: (Each undeclared identifier is reported only once
nessus-fetch.c:424: error: for each function it appears in.)
make[1]: *** [nessus-fetch.o] Error 1
make[1]: Leaving directory `/root/nessus-2.2.1-src/nessus-core/nessus-fetch'
make: *** [fetchtool] Error 2

It looks like it's failing when trying to find the OpenSSL headers, so I
tried symlinking my /opt/csw/include/openssl to nessus-core/include and I
still get the following error:

/opt/sfw/gcc-3/bin/gcc -Wall -I. -I/root/nessus-2.2.1-src/nessus-core/includ
e   -I/usr/local/include/nessus -DNESSUS_ON_SSL -DHAVE_SSL -I/opt/csw/lib/in
clude  -I/usr/local/include/nessus  "-DNESSUSD_CONFDIR=\"/usr/local/etc\""
"-DNESSUSD_STATEDIR=\"/usr/local/var/nessus\""
"-DNESSUSD_DATADIR=\"/usr/local/etc/nessus\""
"-DNESSUSD_LIBDIR=\"/usr/local/lib/nessus\""
"-DNESSUSD_PLUGINS=\"/usr/local/lib/nessus/plugins\""
"-DNESSUSD_REPORTS=\"/usr/local/lib/nessus/reports\"" -DNESSUSD_SHAREDSTATED
IR=\"/usr/local/com/nessus\" -DNESSUSD_LOGDIR=\"/usr/local/var/nessus/logs\"
 -I. -I/root/nessus-2.2.1-src/nessus-core/include    -DHAVE_CONFIG_H   -DUSE
_GTK  -c nessus-fetch.c
nessus-fetch.c: In function `mkhostinfo':
nessus-fetch.c:424: error: `INADDR_NONE' undeclared (first use in this
function)
nessus-fetch.c:424: error: (Each undeclared identifier is reported only once
nessus-fetch.c:424: error: for each function it appears in.)
make[1]: *** [nessus-fetch.o] Error 1
make[1]: Leaving directory `/root/nessus-2.2.1-src/nessus-core/nessus-fetch'
make: *** [fetchtool] Error 2

If you're going to charge enterprise dollars for this type of software, is
it too much to ask that it compile properly on an enterprise platform like
Solaris?

Thanks in advance for your help.

Luke Youngblood
Systems Administrator
PhoneCharge, Inc.
http://www.phonechargeinc.com/


_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to