Hi,
Loooong way to make OpenVAS working.
I am using Xubuntu 13.10 with OpenVAS.
Through the web interface "SecInfo Management" what ever I choose I
have: SCAP and/or CERT database missing on OMP server
When using the script to check the config: openvas-check-setup --v6 --server
Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 3.4.0.
OK: OpenVAS Scanner CA Certificate is present as
/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /var/lib/openvas/plugins contains 34670 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS
Scanner.
SUGGEST: Enable signature checking (see
http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /var/cache/openvas contains 34670 files for
34670 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 4.0.2.
OK: OpenVAS Manager client certificate is present as
/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in /var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager
installation enabled.
OK: OpenVAS Manager database is at revision 74.
OK: OpenVAS Manager expects database at revision 74.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 34601 NVTs.
OK: OpenVAS SCAP database found in
/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in
/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking OpenVAS Administrator ...
OK: OpenVAS Administrator is present in version 1.3.0.
OK: At least one user exists.
OK: At least one admin user exists.
OK: The password policy file at /etc/openvas/pwpolicy.conf
contains entries.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 4.0.1.
Step 5: Checking OpenVAS CLI ...
SKIP: Skipping check for OpenVAS CLI.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening only on the local
interface.
OK: OpenVAS Scanner is listening on port 9391, which is the
default port.
WARNING: OpenVAS Manager is running and listening only on the
local interface.
This means that you will not be able to access the OpenVAS
Manager from the
outside using GSD or OpenVAS CLI.
SUGGEST: Ensure that OpenVAS Manager listens on all interfaces
unless you want
a local service only.
OK: OpenVAS Manager is listening on port 9390, which is the
default port.
OK: OpenVAS Administrator is running and listening only on the
local interface.
OK: OpenVAS Administrator is listening on port 9393, which is
the default port.
OK: Greenbone Security Assistant is listening on port 9392,
which is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
OK: PDF generation successful. The PDF report format is likely
to work.
OK: ssh-keygen found, LSC credential generation for GNU/Linux
targets is likely to work.
OK: rpm found, LSC credential package generation for RPM based
targets is likely to work.
OK: alien found, LSC credential package generation for DEB based
targets is likely to work.
OK: nsis found, LSC credential package generation for Microsoft
Windows targets is likely to work.
It seems like your OpenVAS-6 installation is OK.
And when I try to "sync":
sent 62 bytes received 551 bytes 1226.00 bytes/sec
total size is 8462305 speedup is 13804.74
[i] Major change in internal CERT data structures.
[i] Reinitialization of database necessary.
[i] This update might take a while..
/usr/sbin/openvas-certdata-sync: 185: /usr/sbin/openvas-certdata-sync:
cannot open /usr/share/openvas/cert/cert_db_init.sql: No such file
Error: no such table: dfn_cert_advs
Error: no such table: meta
Error: Inconsistent data. Resetting CERT database.
/usr/sbin/openvas-certdata-sync: 220: /usr/sbin/openvas-certdata-sync:
cannot open /usr/share/openvas/cert/cert_db_init.sql: No such file
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2008.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2009.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2010.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2011.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2012.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2013.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
[i] Updating /var/lib/openvas/cert-data/dfn-cert-2014.xml
warning: failed to load external entity
"/usr/share/openvas/cert/dfn_cert_update.xsl"
cannot parse /usr/share/openvas/cert/dfn_cert_update.xsl
Error: no such table: meta
cert_db_init.sql doesn't exist on my system.
Any ideas ?
Thx for your help.
--
Thierry
_______________________________________________
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
