Re: [Openvas-discuss] Error building openvas from source
* Stefan Schwarz [14. Jul 2012]: Hi, when building openvas from svn i get following error when running cmake: cd openvas-libraries/ cmake -DBUILD_WITH_LDAP=ON . make sudo make install -- Configuring the Libraries... -- Install prefix: /usr/local [] -- Configuring done CMake Error at nasl/CMakeLists.txt:116 (add_executable): Target openvas-nasl links to item -lgpgme -lgpg-error which has leading or trailing whitespace. This is now an error according to policy CMP0004. Maybe this was introduced with svn rev 13683: r13683 | mwiegand | 2012-07-05 13:31:09 +0200 (Do, 05. Jul 2012) * nasl/CMakeLists.txt: Ensure that compilation with modern gccs works by moving linker flags from LINK_FLAGS to target_link_libraries. I'm currently running ubuntu 10.04 LTS (gcc 4.4.3). I'm not really experienced with cmake so any hints are appreciated. As Michael Meyer suggested, this was an error related to the quoting of the LDFLAGS and was indeed introduced by me. It should be fixed in SNV r13734 now, could you test again when you get a chance? Regards, Michael -- Michael Wiegand | Greenbone Networks GmbH | http://www.greenbone.net/ Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Error building openvas from source
Am 16.07.2012 08:18, schrieb Michael Wiegand: * Stefan Schwarz [14. Jul 2012]: Hi, when building openvas from svn i get following error when running cmake: cd openvas-libraries/ cmake -DBUILD_WITH_LDAP=ON . make sudo make install -- Configuring the Libraries... -- Install prefix: /usr/local [] -- Configuring done CMake Error at nasl/CMakeLists.txt:116 (add_executable): Target openvas-nasl links to item -lgpgme -lgpg-error which has leading or trailing whitespace. This is now an error according to policy CMP0004. Maybe this was introduced with svn rev 13683: r13683 | mwiegand | 2012-07-05 13:31:09 +0200 (Do, 05. Jul 2012) * nasl/CMakeLists.txt: Ensure that compilation with modern gccs works by moving linker flags from LINK_FLAGS to target_link_libraries. I'm currently running ubuntu 10.04 LTS (gcc 4.4.3). I'm not really experienced with cmake so any hints are appreciated. As Michael Meyer suggested, this was an error related to the quoting of the LDFLAGS and was indeed introduced by me. It should be fixed in SNV r13734 now, could you test again when you get a chance? Regards, Michael Fix confirmed, r13734 builds as expected. Stefan -- Prof. Dr.-Ing. Stefan Schwarz, Leiter Rechenzentrum Universität der Bundeswehr München Tel (+49) 89 6004-3200, Fax: -3254, http://www.unibw.de/rz smime.p7s Description: S/MIME Kryptografische Unterschrift ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] errors building openvas-libraries 5.0.1
I am trying to install OpenVAS from source. I am using the instructions provided with the source. The build platform is Ubuntu 12.04, running in a virtual machine. I started with openvas-libraries. cmake runs and warns me about wmiclient, and ldap. Output of cmake states it has found ssh libs: -- checking for module 'libssh=0.4.5' -- found libssh, version 0.5.2 When I make the command fails when trying to link the executable openvas-nasl. I wonder if anyone on the list can provide suggestions to resolve this error. Thanks, John ... Scanning dependencies of target openvas-nasl [ 72%] Building C object nasl/CMakeFiles/openvas-nasl.dir/nasl.c.o Linking C executable openvas-nasl libopenvas_nasl.a(nasl_ssh.c.o): In function `nasl_ssh_exec': /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:247: undefined reference to `ssh_new' /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:249: undefined reference to `ssh_options_set' /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:250: undefined reference to `ssh_options_set' ... /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:495: undefined reference to `ssh_free' /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:257: undefined reference to `ssh_free' /usr/src/OpenVAS/openvas-libraries-5.0.1/nasl/nasl_ssh.c:328: undefined reference to `ssh_get_error' collect2: ld returned 1 exit status make[2]: *** [nasl/openvas-nasl] Error 1 make[1]: *** [nasl/CMakeFiles/openvas-nasl.dir/all] Error 2 make: *** [all] Error 2 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] gsad web interface not working
Dear all, i'm using OpenVAS on Fedora 17 with these packages: openvas-administrator-1.2.0-1.fc17.art.i686 openvas-libraries-5.0.1-2.fc17.art.i686 openvas-scanner-3.3.1-2.fc17.art.i686 openvas-1.0-1.fc17.art.noarch openvas-cli-1.1.4-2.fc17.art.i686 openvas-manager-3.0.1-2.fc17.art.i686 greenbone-security-assistant-3.0.1-2.fc17.art.i686 openvas-check-setup it's ok (greenbone security desktop it's not installed but it's not a problem for now). When I try to login to gsad web interface I get no result, the page remains loading, so I activated all log levels and I see: gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: matched gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: name text value /omp?cmd=get_tasksoverrides=1 gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: matching ^.{0,1000} against /omp?cmd=get_tasksoverrides=1: gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: matched gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: name password value *** gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: matching ^.{0,40}$ against **: gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: matched gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: name login value admin gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: matching ^[[:alnum:]-_@.]+$ against admin: gsad vali: DEBUG:2012-06-14 07h40.18 utc:12284: openvas_validate: matched lib serv: DEBUG:2012-06-14 07h40.18 utc:12284: Connected to server. lib serv: DEBUG:2012-06-14 07h40.19 utc:12284: Shook hands with server. lib serv: DEBUG:2012-06-14 07h40.19 utc:12284: send 110 from authenticatecredentialsus[...] lib serv: DEBUG:2012-06-14 07h40.19 utc:12284: = authenticatecredentialsusernameadmin/usernamepassword**/password/credentials/authenticate lib serv: DEBUG:2012-06-14 07h40.19 utc:12284: = done lib xml:MESSAGE:2012-06-14 07h40.19 utc:12284: asking for 1048576 so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? many thanks Paolo ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
* Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. Regards, Michael -- Michael Wiegand | Greenbone Networks GmbH | http://www.greenbone.net/ Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] errors building openvas-libraries 5.0.1
* John Walker [16. Jul 2012]: I am trying to install OpenVAS from source. I am using the instructions provided with the source. The build platform is Ubuntu 12.04, running in a virtual machine. I started with openvas-libraries. cmake runs and warns me about wmiclient, and ldap. Output of cmake states it has found ssh libs: -- checking for module 'libssh=0.4.5' -- found libssh, version 0.5.2 When I make the command fails when trying to link the executable openvas-nasl. I wonder if anyone on the list can provide suggestions to resolve this error. This is fixed in the current SVN trunk. Regards, Michael -- Michael Wiegand | Greenbone Networks GmbH | http://www.greenbone.net/ Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
Am 16.07.2012 10:02, schrieb Michael Wiegand: * Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. the problem is that you CAN NOT downgrade gnutls without breaking your whole system and since gsad is the only application not work with gnutls-2.12.17-1.fc17.x86_64 it is a little bit rude to say it is not gsad's fault signature.asc Description: OpenPGP digital signature ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
* Reindl Harald [16. Jul 2012]: Am 16.07.2012 10:02, schrieb Michael Wiegand: * Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. the problem is that you CAN NOT downgrade gnutls without breaking your whole system and since gsad is the only application not work with gnutls-2.12.17-1.fc17.x86_64 it is a little bit rude to say it is not gsad's fault Well, the effects of downgrading obviously depend on the rest of your system. I did not try it myself, but other folks on the list confirmed this worked for them. Furthermore, nowhere did I say that this is not gsad's fault (though I would guess the bug is on the openvasmd side). This is most certainly a bug in OpenVAS which has not yet been fixed. The bug will be fixed eventually, detailed bug reports and/or patches would certainly be helpful. Regards, Michael -- Michael Wiegand | Greenbone Networks GmbH | http://www.greenbone.net/ Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
*** Reindl Harald wrote: Am 16.07.2012 10:02, schrieb Michael Wiegand: * Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. the problem is that you CAN NOT downgrade gnutls without breaking your whole system and since gsad is the only application not work with gnutls-2.12.17-1.fc17.x86_64 it is a little bit rude to say it is not gsad's fault Just send patches which fix the issues with newer gnutls versions. We will apply them as soon as possible. Micha -- Michael MeyerOpenPGP Key: 52A6EFA6 http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
Am 16.07.2012 11:05, schrieb Michael Wiegand: * Reindl Harald [16. Jul 2012]: Am 16.07.2012 10:02, schrieb Michael Wiegand: * Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. the problem is that you CAN NOT downgrade gnutls without breaking your whole system and since gsad is the only application not work with gnutls-2.12.17-1.fc17.x86_64 it is a little bit rude to say it is not gsad's fault Well, the effects of downgrading obviously depend on the rest of your system. I did not try it myself, but other folks on the list confirmed this worked for them it would mean downgrade Fedora 16/17 to gnutls packages from Fedora 15 which would break package-managment there are a lot of packages depending on gnutls with cross-deps gnome, gtk, kde, java, ghostscipt, subversion.. saying you have a infrastructure with 26 production VM's all updated from a central build/repo-server and not allowing any other machine to pull packages directly from the web to prevent bypass rollout-tests this is impossible Furthermore, nowhere did I say that this is not gsad's fault (though I would guess the bug is on the openvasmd side). This is most certainly a bug in OpenVAS which has not yet been fixed. this bug is the reason that i only became after weeks of work in december 2011 only 2 monthly scans until upgraded to F16 The bug will be fixed eventually, detailed bug reports and/or patches would certainly be helpful i doubt it would be much easier to install as example Fedora 16/17 in a virtual machine and try to debug it as enduser that is out of my scope :-( signature.asc Description: OpenPGP digital signature ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] gsad web interface not working
Am 16.07.2012 11:07, schrieb Michael Meyer: *** Reindl Harald wrote: Am 16.07.2012 10:02, schrieb Michael Wiegand: * Paolo [16. Jul 2012]: so everytime I click on login I get this asking for 1048576 and then nothing happens. Please someone could give me some advice? Which libgnutls version are you using? There seems to be an issue with libgnutls 2.12 and above, downgrading to 2.10 seems to have helped some folks. the problem is that you CAN NOT downgrade gnutls without breaking your whole system and since gsad is the only application not work with gnutls-2.12.17-1.fc17.x86_64 it is a little bit rude to say it is not gsad's fault Just send patches which fix the issues with newer gnutls versions. We will apply them as soon as possible. if i would have the knowledge to do this you can be sure that you would have the patches since months :-( signature.asc Description: OpenPGP digital signature ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Scanning a hostname with more then three dots
rm4dillo, you have no idea how much work you saved me with this patch!!! Now i can scan vhosts by creating one target per vhost i have. Thanks Now i need that the nikto nasl uses that hostname instead of the ip addr. 2012/6/21 rm4dillo D rm4di...@gmail.com Well, after fixing this bug, I encountered a second issue ; the scanner overwrites my target's hostname by performing a reverse lookup on it's IP address ( www.target.com == lookup == 123.123.123.123 == reverse lookup == virtual.hosting.com). I was able to fix this by applying the following patch : --- hosts_gatherer.c(revision 13635) +++ hosts_gatherer.c(working copy) @@ -192,7 +192,7 @@ } else { -if (host-hostname (!hg_valid_ip_addr (host-hostname))) +if (host-hostname) { strncpy (hostname, host-hostname, sz - 1); } as I don't thing that hostname has to be a valid IP address. The only comment I could found about this code was the following commit message First set of changes to openvas-libraries towards IPv6 support. Rm4dillo On Thu, Jun 21, 2012 at 11:41 AM, rm4dillo D rm4di...@gmail.com wrote: Great ! Thank you ! On Tue, Jun 19, 2012 at 5:42 PM, Matthew Mundell matthew.mund...@greenbone.net wrote: I've been trying to create a target using the following hostname a.b.c.example.com (4 dots) but it didn't work while b.c.example.com (3 dots) works. This seems to be due to the following check which is mistakenly applied even if the host is alphanumeric. I think it should be moved somewhere deeper in validate_host. openvas-manager-3.0.1-modified/src/manage_sql.c (validate_host): 21448 : if (g_strv_length (split) 4) 21449 : return 1; Thanks. That was solved in trunk r13492 on 2012-05-24. I've now backported to the openvas-manager-3.0 branch (r13621) so it should appear in the next stable release. -- Greenbone Networks GmbH Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss -- Pavlik Juan José ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss