"Authentication Configuration not found" is the clue.

After generating new server certificates (different process to the client
certificates) you will need to register the new scanner CA with openvasmd.
This is what worked for me.

root@localhost:~# openvasmd --modify-scanner **uuid**  --scanner-ca-pub
/usr/local/var/lib/openvas/CA/cacert.pem --scanner-key-pub
/usr/local/var/lib/openvas/CA/clientcert.pem --scanner-key-priv
/usr/local/var/lib/openvas/private/CA/clientkey.pem

Then you should be able to openvasmd --rebuild

More details here
https://hackertarget.com/openvas-tutorial-tips/#openvas-update-certificates



Regards,

[email protected]
*Hacker Target Pty Ltd*
https://hackertarget.com



On Wed, Dec 6, 2017 at 3:50 AM, Harsh kapadia <[email protected]> wrote:

> Hi,
>
> I’ve tried searching for solution to the below issue but nothing seems to
> work. Have been unable to run openvas scans – it shows the below error:
>
> Operation: Start Task
>
> Status code: 503
>
> Status message: Service temporarily down
>
> Previously the status code used to be 400 and now it’s 503.
>
> The logs under openvasmd.log shows the below details:
>
> lib auth:   INFO:2017-12-05 15h19.53 utc:15073: Authentication configuration 
> not found.
> base gpgme:MESSAGE:2017-12-05 09h27.09 CST:15665: Setting GnuPG homedir to 
> '/var/lib/openvas/gnupg'
> base gpgme:MESSAGE:2017-12-05 09h27.09 CST:15665: Using OpenPGP engine 
> version '2.0.22'
> lib  serv:WARNING:2017-12-05 09h27.41 CST:15715: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h27.41 CST:15715: Task 
> 1ff6e5b7-0239-40ea-8da5-e79483f687ec could not be started by etvasadmin
> lib  serv:WARNING:2017-12-05 15h28.05 utc:15757: openvas_server_new_mem: 
> Error in parsing.
> lib auth:   INFO:2017-12-05 15h28.25 utc:15803: Authentication configuration 
> not found.
> lib  serv:WARNING:2017-12-05 09h30.19 CST:15996: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h30.19 CST:15996: Task 
> eca758bd-545d-4822-9308-6db135f33432 could not be started by etvasadmin
> lib  serv:WARNING:2017-12-05 09h37.51 CST:16313: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h37.51 CST:16313: Task 
> add3fcd0-9cc1-4b0c-9e1f-81423902249e could not be started by etvasadmin
> lib  serv:WARNING:2017-12-05 09h47.36 CST:16708: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h47.36 CST:16708: Task 
> add3fcd0-9cc1-4b0c-9e1f-81423902249e could not be started by etvasadmin
> lib  serv:WARNING:2017-12-05 15h54.52 utc:17022: openvas_server_new_mem: 
> Error in parsing.
> lib  serv:WARNING:2017-12-05 15h57.55 utc:17102: openvas_server_new_mem: 
> Error in parsing.
> lib  serv:WARNING:2017-12-05 15h58.00 utc:17106: openvas_server_new_mem: 
> Error in parsing.
> lib auth:   INFO:2017-12-05 15h58.21 utc:17154: Authentication configuration 
> not found.
> lib  serv:WARNING:2017-12-05 09h59.08 CST:17229: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h59.08 CST:17229: Task 
> 1ff6e5b7-0239-40ea-8da5-e79483f687ec could not be started by etvasadmin
> lib  serv:WARNING:2017-12-05 09h59.50 CST:17270: openvas_server_new_mem: 
> Error in parsing.
> event task:MESSAGE:2017-12-05 09h59.50 CST:17270: Task 
> ff8752df-5b26-46f8-90fa-1c6bedcf61fe could not be started by etvasadmin
>
> The initial issue was an expired certificate and that was resolved by
> following the steps from http://plugins.openvas.org/ova_503.txt - but
> that still does not make the scans to start. The 'openvasmd-rebuild'
> command got executed within a second..
>
> Also, all the services [openvas-scanner, openvas-manager, redis & gsad]
> are running perfectly when checked via systemctl.
>
> Would someone please let me know what next steps should be followed to
> remediate this.
>
> Thanks in advance!
>
>
> Regards,
>
> Harsh
>
> _______________________________________________
> Openvas-discuss mailing list
> [email protected]
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to