Ok, I've fixed the problem by clean all directories named openvas on disk
and resintalled openvas with apt..

But the problem comes back as i re-generated those certs for a long lifetime

What I did is:
---------------------------------------
openvas-mkcert -f
[follow the prompt to fill in CA/server cert infomation]
openvas-mkcert-client -i
[follow the prompt to fill in client cert infomation]
[restart manager, scanner and greenbone service]
---------------------------------------

New generated certs can pass those openssl tests in the openvas-setup
script, but when it come to a scan, the tls error comes again:
---------------------------------------
lib  serv:WARNING:2015-12-15 06h51.51 UTC:25599: Failed to shake hands with
peer: The TLS connection was non-properly terminated.
lib  serv:WARNING:2015-12-15 06h51.51 UTC:25599: Failed to shutdown server
socket
event task:MESSAGE:2015-12-15 06h51.51 UTC:25599: Task
60bd5e91-edd2-4757-b0dd-fd173d28eafd could not be started by admin
---------------------------------------

Did I do something wrong? It seems like that openvas has remembered the
first certs I generated after a clean install and rejected newer ones. What
is the correct way to replace these certs?

Regards,
Adam.H
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to