Re: [Openvas-discuss] unable to add SSH credentials to a target
Thanks, looks like updating the code resolved it Simon Deziel wrote: On 12-11-16 12:45 PM, Ryan Schulze wrote: Was discussed in an earlier thread :-) http://lists.wald.intevation.org/pipermail/openvas-discuss/2012-October/004612.html I should have dig a little deeper in the mailing list archive, sorry. I'll wait for 5.0.4 to be available in the OBS repo :) For now, I am working around this by doing manual edition of the sqlite3 DB. Thanks a lot Ryan! Regards, Simon On 11/8/2012 3:56 PM, Ali Khalfan wrote: For the record I'm facing this problem on Debian Squeeze Simon Deziel wrote: Hi all, I just installed OpenVAS on Ubuntu 12.04 using the OBS repo. Now, I'm unable to add SSH credentials to a target. This was reported in http://lists.wald.intevation.org/pipermail/openvas-discuss/2012-November/004651.html but no one answered yet. Here is what is logged in openvasmd.log: lib rer:WARNING:2012-11-08 20h32.11 UTC:28525: Target source configuration could not be loaded. Any help is greatly appreciated. Regards, Simon ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] openvas - ovaldi status
Can someone please point me to the right direction about openvas and ovaldi ? The integrated tools site http://www.openvas.org/integrated-tools.html refers to ovaldi 5.5.4, while the latest version is 5.10. So, I'm thinking it's a bit outdated. Can we install ovaldi 5.10 without any consequences? The last reference about ovaldi I can find on the mailing list is here http://seclists.org/openvas/2012/q1/284 . So, I'm a bit lost about its status --Ali ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[Openvas-discuss] Sourcefire Connector
Hi, trying to get the Sourcefire Connector escalator to work, but having difficulties. If I create a new escalator from omp, say: escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e nameDaily/name comment/comment in_use0/in_use conditionAlways datachanged namedirection/name/data dataHigh namelevel/name/data/condition eventTask run status changed dataDone namestatus/name/data/event methodSourcefire Connector data8307 namedefense_center_port/name/data data1 namenotice/name/data data namefrom_address/name /data datablah namepkcs12/name /data data nameURL/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_attach_format/name/data data nameto_address/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_report_format/name/data data192.168.1.57 namedefense_center_ip/name/data/method /escalator And if I attempt to test from both GSA and OMP root@unknown080027B7E95B:~/openvas-cli-1.1.5# omp -h 192.168.1.43 -u username -w password -X test_escalator escalator_id=\e3ce3160-a621-4fc4-a967-2ff706fde46e\ / test_escalator_response status_text=Internal error status=500/test_escalator_response root@unknown080027B7E95B:~/openvas-cli-1.1.5# Thoughts? An strace on openvasmd shows no system call to even run the connector escalator script, so I am not even sure where it is failing. -- http://volatile-minds.blogspot.com -- blog http://www.volatileminds.net -- website ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sourcefire Connector
I should also mention I am running on ubuntu 12.04, compiled from source. On Sat, 2012-11-17 at 09:15 -0600, Brandon Perry wrote: Hi, trying to get the Sourcefire Connector escalator to work, but having difficulties. If I create a new escalator from omp, say: escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e nameDaily/name comment/comment in_use0/in_use conditionAlways datachanged namedirection/name/data dataHigh namelevel/name/data/condition eventTask run status changed dataDone namestatus/name/data/event methodSourcefire Connector data8307 namedefense_center_port/name/data data1 namenotice/name/data data namefrom_address/name /data datablah namepkcs12/name /data data nameURL/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_attach_format/name/data data nameto_address/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_report_format/name/data data192.168.1.57 namedefense_center_ip/name/data/method /escalator And if I attempt to test from both GSA and OMP root@unknown080027B7E95B:~/openvas-cli-1.1.5# omp -h 192.168.1.43 -u username -w password -X test_escalator escalator_id=\e3ce3160-a621-4fc4-a967-2ff706fde46e\ / test_escalator_response status_text=Internal error status=500/test_escalator_response root@unknown080027B7E95B:~/openvas-cli-1.1.5# Thoughts? An strace on openvasmd shows no system call to even run the connector escalator script, so I am not even sure where it is failing. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas - ovaldi status
Try it and find out. :) On Sat, 2012-11-17 at 17:05 +0300, Ali Khalfan wrote: Can someone please point me to the right direction about openvas and ovaldi ? The integrated tools site http://www.openvas.org/integrated-tools.html refers to ovaldi 5.5.4, while the latest version is 5.10. So, I'm thinking it's a bit outdated. Can we install ovaldi 5.10 without any consequences? The last reference about ovaldi I can find on the mailing list is here http://seclists.org/openvas/2012/q1/284 . So, I'm a bit lost about its status --Ali ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sourcefire Connector
Sorry, one more thing. In openvasmd.log, the only log message related to running the escalator is this: event auth:MESSAGE:2012-11-17 15h03.58 utc:4377: Authentication success for user username (ed2e15d2-3be5-4ff6-b41a-4d959ace8b46) event auth:MESSAGE:2012-11-17 15h05.15 utc:4380: Authentication success for user username (ed2e15d2-3be5-4ff6-b41a-4d959ace8b46) event auth:MESSAGE:2012-11-17 15h05.23 utc:4383: Authentication success for user username (ed2e15d2-3be5-4ff6-b41a-4d959ace8b46) event escalator:MESSAGE:2012-11-17 15h05.23 UTC:4383: The escalator for task Example task was triggered (Event: Task status changed to 'Done', Condition: Always) On Sat, 2012-11-17 at 09:20 -0600, Brandon Perry wrote: I should also mention I am running on ubuntu 12.04, compiled from source. On Sat, 2012-11-17 at 09:15 -0600, Brandon Perry wrote: Hi, trying to get the Sourcefire Connector escalator to work, but having difficulties. If I create a new escalator from omp, say: escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e nameDaily/name comment/comment in_use0/in_use conditionAlways datachanged namedirection/name/data dataHigh namelevel/name/data/condition eventTask run status changed dataDone namestatus/name/data/event methodSourcefire Connector data8307 namedefense_center_port/name/data data1 namenotice/name/data data namefrom_address/name /data datablah namepkcs12/name /data data nameURL/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_attach_format/name/data data nameto_address/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_report_format/name/data data192.168.1.57 namedefense_center_ip/name/data/method /escalator And if I attempt to test from both GSA and OMP root@unknown080027B7E95B:~/openvas-cli-1.1.5# omp -h 192.168.1.43 -u username -w password -X test_escalator escalator_id=\e3ce3160-a621-4fc4-a967-2ff706fde46e\ / test_escalator_response status_text=Internal error status=500/test_escalator_response root@unknown080027B7E95B:~/openvas-cli-1.1.5# Thoughts? An strace on openvasmd shows no system call to even run the connector escalator script, so I am not even sure where it is failing. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sourcefire Connector
Hi, There a two days to interact with the SF, one is via report-format, the other is via connector automatic, that needs a DC Certificate ! You need to install the connection to be able to run it, have you tried the report format plugin first ? I can´t see the DefenceCenter Certificate in your request, so you can´t use it without one ;-) On 11/17/2012 4:20 PM, Brandon Perry wrote: I should also mention I am running on ubuntu 12.04, compiled from source. On Sat, 2012-11-17 at 09:15 -0600, Brandon Perry wrote: Hi, trying to get the Sourcefire Connector escalator to work, but having difficulties. If I create a new escalator from omp, say: escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e nameDaily/name comment/comment in_use0/in_use conditionAlways datachanged namedirection/name/data dataHigh namelevel/name/data/condition eventTask run status changed dataDone namestatus/name/data/event methodSourcefire Connector data8307 namedefense_center_port/name/data data1 namenotice/name/data data namefrom_address/name /data datablah namepkcs12/name /data data nameURL/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_attach_format/name/data data nameto_address/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_report_format/name/data data192.168.1.57 namedefense_center_ip/name/data/method /escalator And if I attempt to test from both GSA and OMP root@unknown080027B7E95B:~/openvas-cli-1.1.5# omp -h 192.168.1.43 -u username -w password -X test_escalator escalator_id=\e3ce3160-a621-4fc4-a967-2ff706fde46e\ / test_escalator_response status_text=Internal error status=500/test_escalator_response root@unknown080027B7E95B:~/openvas-cli-1.1.5# Thoughts? An strace on openvasmd shows no system call to even run the connector escalator script, so I am not even sure where it is failing. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss -- Gruss Lukas Grunwald aka REG lg1 ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Sourcefire Connector
There actually is one in the pkcs12 part, but I replaced it with blah. The PKCS12 should be valid... On Sat, 2012-11-17 at 16:39 +0100, Lukas Grunwald wrote: Hi, There a two days to interact with the SF, one is via report-format, the other is via connector automatic, that needs a DC Certificate ! You need to install the connection to be able to run it, have you tried the report format plugin first ? I can´t see the DefenceCenter Certificate in your request, so you can´t use it without one ;-) On 11/17/2012 4:20 PM, Brandon Perry wrote: I should also mention I am running on ubuntu 12.04, compiled from source. On Sat, 2012-11-17 at 09:15 -0600, Brandon Perry wrote: Hi, trying to get the Sourcefire Connector escalator to work, but having difficulties. If I create a new escalator from omp, say: escalator id=e3ce3160-a621-4fc4-a967-2ff706fde46e nameDaily/name comment/comment in_use0/in_use conditionAlways datachanged namedirection/name/data dataHigh namelevel/name/data/condition eventTask run status changed dataDone namestatus/name/data/event methodSourcefire Connector data8307 namedefense_center_port/name/data data1 namenotice/name/data data namefrom_address/name /data datablah namepkcs12/name /data data nameURL/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_attach_format/name/data data nameto_address/name /data data5ceff8ba-1f62-11e1-ab9f-406186ea4fc5 namenotice_report_format/name/data data192.168.1.57 namedefense_center_ip/name/data/method /escalator And if I attempt to test from both GSA and OMP root@unknown080027B7E95B:~/openvas-cli-1.1.5# omp -h 192.168.1.43 -u username -w password -X test_escalator escalator_id=\e3ce3160-a621-4fc4-a967-2ff706fde46e\ / test_escalator_response status_text=Internal error status=500/test_escalator_response root@unknown080027B7E95B:~/openvas-cli-1.1.5# Thoughts? An strace on openvasmd shows no system call to even run the connector escalator script, so I am not even sure where it is failing. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas - ovaldi status
I thought about it, but I'll get a better head start if someone tried it before me. I'll give it a shot Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Brandon Perry bperry.volat...@gmail.com To: Ali Khalfan ali.khal...@gmail.com CC: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 06:27:14 PM AST Try it and find out. :) On Sat, 2012-11-17 at 17:05 +0300, Ali Khalfan wrote: Can someone please point me to the right direction about openvas and ovaldi ? The integrated tools site http://www.openvas.org/integrated-tools.html refers to ovaldi 5.5.4, while the latest version is 5.10. So, I'm thinking it's a bit outdated. Can we install ovaldi 5.10 without any consequences? The last reference about ovaldi I can find on the mailing list is here http://seclists.org/openvas/2012/q1/284 . So, I'm a bit lost about its status --Ali ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas - ovaldi status
I'm stuck here: In file included from ../../src/probes/linux/RPMInfoProbe.cpp:36: ../../src/linux/RpmGuards.h: In constructor ‘RpmfiGuard::RpmfiGuard(rpmts_s*, headerToken_s*, rpmTag, const std::string)’: ../../src/linux/RpmGuards.h:118: error: invalid conversion from ‘int’ to ‘rpmfiFlags’ ../../src/linux/RpmGuards.h:118: error: initializing argument 4 of ‘rpmfi_s* rpmfiNew(rpmts_s*, headerToken_s*, rpmTag, rpmfiFlags)’ ../../src/linux/RpmGuards.h:118: error: expected ‘)’ before ‘;’ token ../../src/linux/RpmGuards.h:118: error: invalid conversion from ‘rpmfi_s*’ to ‘int’ ../../src/linux/RpmGuards.h: In destructor ‘RpmfiGuard::~RpmfiGuard()’: ../../src/linux/RpmGuards.h:125: error: invalid conversion from ‘int’ to ‘rpmfi_s*’ ../../src/linux/RpmGuards.h:125: error: initializing argument 1 of ‘rpmfi_s* rpmfiFree(rpmfi_s*)’ ../../src/linux/RpmGuards.h: In member function ‘RpmfiGuard::operator rpmfi_s*()’: ../../src/linux/RpmGuards.h:129: error: invalid conversion from ‘int’ to ‘rpmfi_s*’ ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘bool RPMInfoProbe::readHeaderString(headerToken_s*, int_32, std::string*)’: ../../src/probes/linux/RPMInfoProbe.cpp:359: error: ‘headerGetEntry’ was not declared in this scope ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘int_32 RPMInfoProbe::readHeaderInt32(headerToken_s*, int_32)’: ../../src/probes/linux/RPMInfoProbe.cpp:381: error: ‘headerGetEntry’ was not declared in this scope ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘void RPMInfoProbe::ChildGetSigKeyId(int, int, std::string)’: ../../src/probes/linux/RPMInfoProbe.cpp:424: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:425: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:426: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:465: error: invalid conversion from ‘const char**’ to ‘char* const*’ ../../src/probes/linux/RPMInfoProbe.cpp:465: error: initializing argument 3 of ‘int rpmcliQuery(rpmts_s*, rpmQVKArguments_s*, char* const*)’ make: *** [../../src/probes/linux/RPMInfoProbe.o] Error 1 Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Ali Khalfan ali.khal...@gmail.com To: bperry.volat...@gmail.com CC: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 09:26:59 PM AST I thought about it, but I'll get a better head start if someone tried it before me. I'll give it a shot Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Brandon Perry bperry.volat...@gmail.com To: Ali Khalfan ali.khal...@gmail.com CC: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 06:27:14 PM AST Try it and find out. :) On Sat, 2012-11-17 at 17:05 +0300, Ali Khalfan wrote: Can someone please point me to the right direction about openvas and ovaldi ? The integrated tools site http://www.openvas.org/integrated-tools.html refers to ovaldi 5.5.4, while the latest version is 5.10. So, I'm thinking it's a bit outdated. Can we install ovaldi 5.10 without any consequences? The last reference about ovaldi I can find on the mailing list is here http://seclists.org/openvas/2012/q1/284 . So, I'm a bit lost about its status --Ali ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] openvas - ovaldi status
I just used the available package in the debian squeeze repository. I think I got it up and running, and I got all the xsd files to the openvas plugin directory. But I can't see an OVALDI family in gsad or in omp list families command. I've already restarted openvassd and openvasmd. Is there anything else I need to do ? Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Ali Khalfan ali.khal...@gmail.com To: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 10:55:19 PM AST I'm stuck here: In file included from ../../src/probes/linux/RPMInfoProbe.cpp:36: ../../src/linux/RpmGuards.h: In constructor ‘RpmfiGuard::RpmfiGuard(rpmts_s*, headerToken_s*, rpmTag, const std::string)’: ../../src/linux/RpmGuards.h:118: error: invalid conversion from ‘int’ to ‘rpmfiFlags’ ../../src/linux/RpmGuards.h:118: error: initializing argument 4 of ‘rpmfi_s* rpmfiNew(rpmts_s*, headerToken_s*, rpmTag, rpmfiFlags)’ ../../src/linux/RpmGuards.h:118: error: expected ‘)’ before ‘;’ token ../../src/linux/RpmGuards.h:118: error: invalid conversion from ‘rpmfi_s*’ to ‘int’ ../../src/linux/RpmGuards.h: In destructor ‘RpmfiGuard::~RpmfiGuard()’: ../../src/linux/RpmGuards.h:125: error: invalid conversion from ‘int’ to ‘rpmfi_s*’ ../../src/linux/RpmGuards.h:125: error: initializing argument 1 of ‘rpmfi_s* rpmfiFree(rpmfi_s*)’ ../../src/linux/RpmGuards.h: In member function ‘RpmfiGuard::operator rpmfi_s*()’: ../../src/linux/RpmGuards.h:129: error: invalid conversion from ‘int’ to ‘rpmfi_s*’ ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘bool RPMInfoProbe::readHeaderString(headerToken_s*, int_32, std::string*)’: ../../src/probes/linux/RPMInfoProbe.cpp:359: error: ‘headerGetEntry’ was not declared in this scope ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘int_32 RPMInfoProbe::readHeaderInt32(headerToken_s*, int_32)’: ../../src/probes/linux/RPMInfoProbe.cpp:381: error: ‘headerGetEntry’ was not declared in this scope ../../src/probes/linux/RPMInfoProbe.cpp: In member function ‘void RPMInfoProbe::ChildGetSigKeyId(int, int, std::string)’: ../../src/probes/linux/RPMInfoProbe.cpp:424: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:425: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:426: warning: deprecated conversion from string constant to ‘char*’ ../../src/probes/linux/RPMInfoProbe.cpp:465: error: invalid conversion from ‘const char**’ to ‘char* const*’ ../../src/probes/linux/RPMInfoProbe.cpp:465: error: initializing argument 3 of ‘int rpmcliQuery(rpmts_s*, rpmQVKArguments_s*, char* const*)’ make: *** [../../src/probes/linux/RPMInfoProbe.o] Error 1 Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Ali Khalfan ali.khal...@gmail.com To: bperry.volat...@gmail.com CC: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 09:26:59 PM AST I thought about it, but I'll get a better head start if someone tried it before me. I'll give it a shot Original Message Subject: Re: [Openvas-discuss] openvas - ovaldi status From: Brandon Perry bperry.volat...@gmail.com To: Ali Khalfan ali.khal...@gmail.com CC: openvas-discuss@wald.intevation.org Date: Sat 17 Nov 2012 06:27:14 PM AST Try it and find out. :) On Sat, 2012-11-17 at 17:05 +0300, Ali Khalfan wrote: Can someone please point me to the right direction about openvas and ovaldi ? The integrated tools site http://www.openvas.org/integrated-tools.html refers to ovaldi 5.5.4, while the latest version is 5.10. So, I'm thinking it's a bit outdated. Can we install ovaldi 5.10 without any consequences? The last reference about ovaldi I can find on the mailing list is here http://seclists.org/openvas/2012/q1/284 . So, I'm a bit lost about its status --Ali ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
