On Fri, 22 May 2015 16:51:11 +0100
Hani Benhabiles <[email protected]> wrote:

> >
> > When I run openvasmd --rebuild command, it fails with
> >
> > lib  serv:WARNING:2015-05-17 13h11.49 utc:9362: Failed to shake
> > hands with peer: The TLS connection was non-properly terminated.
> >
> > It seems that this warning is related to gnutls version according to
> > this[1] and this[2]. A user siad[3] that the problem had disappeared
> > when he/she started to use gnutls 3.3.10-1 on Arch Linux.
> >
> > On Ubuntu 15.04, libgnutls version is 3.3.8
> > LC_ALL=C apt-cache policy libgnutls-dev
> > libgnutls-dev:
> >   Installed: 3.3.8-3ubuntu3
> >   Candidate: 3.3.8-3ubuntu3
> >   Version table:
> >  *** 3.3.8-3ubuntu3 0
> >         500 http://archive.ubuntu.com/ubuntu/ vivid/main amd64 
> > Packages
> >         100 /var/lib/dpkg/status
> >
> > So, should I compile a newer (3.3.10) or an older (2.12) version of
> > libgnutls-dev or is there another way to solve this problem?
> >
> > [1]
> > 
> > http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-June/006309.html
> > [2]
> > 
> > https://wald.intevation.org/tracker/?func=detail&atid=220&aid=6572&group_id=29
> > [3] https://bugs.archlinux.org/task/42554
> >
> 
> Yes, this is a bug in GnuTLS 3.3.8 that is fixed in 3.3.10. I have 
> commited a fix in the maintenance branch to work-around the issue.
> You can either update GnuTLS, grab openvas scanner + libraries code
> from OpenVAS 8 branch (or wait for the next maintenance release
> packages.)
> 
> Best regards,
> 
> Hani.

Hi,

I installed version 8.0.3 of OpenVAS Libraries, version 6.0.3 of
OpenVAS Manager, Scanner and GSA; and upgraded libgnutls-dev to version
3.3.15 with its dependencies. Then, I re-run openvasmd --rebuild and
got, unfortunately, same error. 

Should I had to install OpenVAS libraries, manager, scanner and GSA
from svn?

LC_ALL=C dpkg -l | grep libgnutls
ii  libgnutls-deb0-28:amd64                  3.3.15-2ubuntu1                    
        amd64        GNU TLS library - main runtime library
ii  libgnutls-dev:amd64                           3.3.15-2ubuntu1               
             amd64        GNU TLS library - development files
ii  libgnutls-openssl27:amd64               3.3.15-2ubuntu1                     
       amd64        GNU TLS library - OpenSSL wrapper
ii  libgnutlsxx28:amd64                          3.3.15-2ubuntu1                
            amd64        GNU TLS library - C++ runtime library

openvassd -s
plugins_folder = /usr/local/var/lib/openvas/plugins
cache_folder = /usr/local/var/cache/openvas
include_folders = /usr/local/var/lib/openvas/plugins
max_hosts = 30
max_checks = 10
be_nice = no
logfile = /usr/local/var/log/openvas/openvassd.messages
log_whole_attack = no
log_plugins_name_at_load = no
dumpfile = /usr/local/var/log/openvas/openvassd.dump
cgi_path = /cgi-bin:/scripts
optimize_test = yes
checks_read_timeout = 5
network_scan = no
non_simult_ports = 139, 445
plugins_timeout = 320
safe_checks = yes
auto_enable_dependencies = yes
use_mac_addr = no
nasl_no_signature_check = no
drop_privileges = no
unscanned_closed = yes
unscanned_closed_udp = yes
vhosts = 
vhosts_ip = 
report_host_details = yes
cert_file = /usr/local/var/lib/openvas/CA/servercert.pem
key_file = /usr/local/var/lib/openvas/private/CA/serverkey.pem
ca_file = /usr/local/var/lib/openvas/CA/cacert.pem
kb_location = /tmp/redis.sock
config_file = /usr/local/etc/openvas/openvassd.conf
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to