Re: [Openvas-discuss] Openvas 7 to Openvas 8 : openvasmd rebuild failed to shake hands with peer

2016-07-27 Thread Winfried Neessen
Hi Romain, > My problem now is when I try to do openvasmd --rebuild, it failed with a " > Failed to shake hands with peer: The TLS connection was non-properly > terminated. " > I had a similar issue, some time ago. Maybe this thread can help you:

Re: [Openvas-discuss] Can't get OpenVAS server to listen on a specific IP Address

2016-02-12 Thread Winfried Neessen
Hi, a look at the /etc/init.d/openvas-scanner should help. Check attached screenshot. There the file /etc/default/openvas-scanner is referenced. If you define SCANNER_ADDRESS in that file with 0.0.0.0 (or whatever) instead of 127.0.0.1 it should listen on any IP. Winni > From: "Lyndon

Re: [Openvas-discuss] OpenVAS v8 on ubuntu 14.04.03 LTS

2016-02-11 Thread Winfried Neessen
Hi, > On Ubuntu : > - 1 hight > - 7 medium > - 1 low > - 55 logs > > On kali the scan takes longer than on ubuntu. I stopped it at 96%: > - 15 hight > - 35 medium > - 7 low > - 88 logs > You might want to compare the port scan settings, enabled NVTs and scan options on for each task on each

Re: [Openvas-discuss] update OpenVAS from source code in Kali

2015-09-08 Thread Winfried Neessen
Hi, > E: Package 'libgnutls-dev' has no installation candidate > E: Unable to locate package libgpgme11-dev > I have no Kali Linux at hand, but as it's basically a Debian derived Linux distribution, try: $ apt-cache search libgnutls-dev and $ apt-cache search libgpgme11-dev And check if it

Re: [Openvas-discuss] OpenVAS Installation : Error :redis-server is not running or not listening on socket: /tmp/redis.sock

2015-07-17 Thread Winfried Neessen
Hi, your default redis installation only listens on the tcp port, not the UNIX Socket. From openvas-scanner-5.0.4/doc/redis_config.txt: OpenVAS can currently only access redis via a unix socket. This choice has been made for the sake of speed and security. No authentication is supported

Re: [Openvas-discuss] TLS error when trying to launch scan

2015-07-16 Thread Winfried Neessen
- Compression: NULL - Options: extended master secret, safe renegotiation, - Handshake was completed - Simple Client Mode: Any help is highly appreciated. Winni From: Eero Volotinen eero.voloti...@iki.fi To: Winfried Neessen nees...@cleverbridge.com Cc: openvas-discuss openvas-discuss

Re: [Openvas-discuss] TLS error when trying to launch scan

2015-07-16 Thread Winfried Neessen
Holy moli... now that I saw my mail, I see the: - Status: The certificate is NOT trusted. The name in the certificate does not match the expected. warning. Looks like this might be the issue. Winni From: Winfried Neessen nees...@cleverbridge.com To: openvas-discuss openvas-discuss

Re: [Openvas-discuss] TLS error when trying to launch scan

2015-07-16 Thread Winfried Neessen
better logging. It's very frustrating to spend two days troubleshooting because of missing/insufficient logging. Winni From: Winfried Neessen nees...@cleverbridge.com To: openvas-discuss openvas-discuss@wald.intevation.org Sent: Thursday, July 16, 2015 3:52:40 PM Subject: Re: [Openvas

Re: [Openvas-discuss] Long delay when adding first credential

2015-07-16 Thread Winfried Neessen
http://www.issihosts.com/haveged/ can help here. From: Brandon Perry bperry.volat...@gmail.com To: Wesley Botham wes...@semcat.net Cc: openvas-discuss openvas-discuss@wald.intevation.org Sent: Thursday, July 16, 2015 5:43:28 PM Subject: Re: [Openvas-discuss] Long delay when adding first

[Openvas-discuss] TLS error when trying to launch scan

2015-07-14 Thread Winfried Neessen
Hi, I am trying to launch a scan in my OpenVAS instance. Once I press the play-button, it says Requested but after a second it already says: Stopped at 1%. The openvasmd.log says: md main:WARNING:2015-07-14 10h06.49 UTC:24191: openvas_scanner_read: failed to read from server: The TLS

[Openvas-discuss] Missing glib.h inclusion in GSA 6.0.4

2015-07-14 Thread Winfried Neessen
Hi, I was just building GSA 6.0.4 from the sources on my system. After a successful: mkdir build cd build cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=/usr/pkg/openvas .. I ran the make command and ran into the following issue: % make [ 5%] Generating CPE icon dictionary [

Re: [Openvas-discuss] TLS error when trying to launch scan

2015-07-14 Thread Winfried Neessen
To: Winfried Neessen nees...@cleverbridge.com Cc: openvas-discuss openvas-discuss@wald.intevation.org Sent: Tuesday, July 14, 2015 12:10:47 PM Subject: Re: [Openvas-discuss] TLS error when trying to launch scan Check your redis-server configuration. 14.7.2015 1.09 ip. Winfried Neessen nees

Re: [Openvas-discuss] TLS error when trying to launch scan

2015-07-14 Thread Winfried Neessen
Did this a couple of times. From: Eero Volotinen eero.voloti...@iki.fi To: Winfried Neessen nees...@cleverbridge.com Cc: openvas-discuss openvas-discuss@wald.intevation.org Sent: Tuesday, July 14, 2015 3:56:03 PM Subject: Re: [Openvas-discuss] TLS error when trying to launch scan Try

Re: [Openvas-discuss] Unable to install OpenVAS 8

2015-05-27 Thread Winfried Neessen
Does anyone know where to look for where OpenVAS stores user information? You mean s. th. like this? $ echo SELECT * FROM users; | sqlite3 /usr/pkg/openvas/var/lib/openvas/mgr/tasks.db (Path to tasks.db needs to be adjusted according to your installation) Winni

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-03-24 Thread Winfried Neessen
Hi John, I had/have the same issue using OpenVAS7 built from source on Ubuntu 14.04 - With OpenVAS8 beta - built from source, I cannot reproduce it, using the same type of machine/linux version) Thanks for the advice. I updated to OpenVAS8 beta and it seems to work w/o any issues. Winni

Re: [Openvas-discuss] Error building OpenVAS 8 libraries

2015-03-24 Thread Winfried Neessen
and -lhiredis: /usr/bin/gcc -Wformat -Wformat-security -O2 [...] -lhiredis -L -lgcrypt [...] it compiles w/o issues. Winni From: Winfried Neessen nees...@cleverbridge.com To: openvas-discuss openvas-discuss@wald.intevation.org Sent: Tuesday, March 17, 2015 11:07:01 AM Subject: [Openvas-discuss] Error

[Openvas-discuss] Error building OpenVAS 8 libraries

2015-03-17 Thread Winfried Neessen
Hi, as it has been suggested to test OpenVAS 8 to get rid of the unresolvable problem with the scan configs, I am just doing so... While building openvas-libraries-8.0.0, I receive the following error: Linking C shared library libopenvas_misc.so [ 40%] Built target openvas_misc_shared [

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-03-09 Thread Winfried Neessen
Hi, does anyone have any other ideas? This really keeps me from using my new OpenVAS7 setup. Thanks Winni - Original Message - From: Winfried Neessen nees...@cleverbridge.com To: openvas-discuss openvas-discuss@wald.intevation.org Sent: Thursday, February 26, 2015 10:03:54 PM

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-26 Thread Winfried Neessen
Hi Matthew, I tried cloning Full and very deep on OpenVAS-7 and it worked OK. Cloning is not the problem. That works fine. Once I start editing the clone, the problem starts. As shown in the screencast and screenshots, I cannot use any comment, that holds anthing else but charcters. Even a

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-26 Thread Winfried Neessen
To be clear, does it work if you do this? - clone full and very deep - click the edit icon - click the topmost save config No, it doesn't. See: https://vimeo.com/120732590 It should only grow by a few MB. Are you running scans at the same time? No, but I ran a --rebuild, which I

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-26 Thread Winfried Neessen
Hi again, It also happens, when I clone one of the default configurations w/o any editing. For ease of explanation, I took a screencast: https://drive.google.com/file/d/0B08MjN6ustyda3BQd1VmS2VULTg/view?usp=sharing It even happens when I create a clean config. None of the things I

Re: [Openvas-discuss] Strange behaviour when working on scan configs

2015-02-23 Thread Winfried Neessen
Hi Jan-Oliver, perhaps the comment validator of the edit dialog is stricter than the one of the importer. This could explain your first observation. I get that, but is not allowing just alpha-numeric characters and an underscore a little bit too restrictive? The second observation (the

Re: [Openvas-discuss] list: laughable message-size limits

2015-02-14 Thread Winfried Neessen
Agreed. Also those links are usuall not very obvious and therefore might be used by bad people to spread some malware on lists. Winni PS: Offensive language is also highly disapproved on most lists ;) -- Sent from my wireless handheld device Am 14.02.2015 um 05:05 schrieb Reindl Harald

[Openvas-discuss] Strange behaviour when working on scan configs

2015-02-11 Thread Winfried Neessen
Hi everyone, I've set up a new OpenVAS 7 installation in our network and am currently working to get it configured. While working on the scan configs, I noticed some strange behaviour. Here are the steps I am performing. - First I export the Full and very deep config to a XML file (I also

Re: [Openvas-discuss] Weird issue - GSA Login Failed - KALI distro

2015-02-05 Thread Winfried Neessen
Hi Randy, How can I start the OMP service? How can I start the OpenVAS Manager? OMP is part of the OpenVAS manager. The log file might tell you the reason. How can I see the OpenVAS Manager log file? Depending on your installation, it's most likely /var/log/openvas/openvasmd.log or

Re: [Openvas-discuss] Weird issue - GSA Login Failed - KALI distro

2015-02-04 Thread Winfried Neessen
If it is expired, just run openvas-mkcert-client -n -i Shouldn't it be openvas-mkcert-client -n om -i? Otherwise a user -i will be created. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org

Re: [Openvas-discuss] Weird issue - GSA Login Failed - KALI distro

2015-02-04 Thread Winfried Neessen
Hi, despite you say, the OpenVAS manager was on error all the time and everything worked though, the OpenVAS is mandatory and nothing will actually work without it. It provides the OMP protocol which is used by the other OpenVAS services i. e. to authenticate the user (and a lot more

Re: [Openvas-discuss] R: Problems compiling OpenVAS 7.x

2014-11-09 Thread Winfried Neessen
source package # wish it helps -- Original -- From: Winfried Neessen;nees...@cleverbridge.com; Date: Thu, Nov 6, 2014 08:16 PM To: pakygtapaky...@libero.it; Cc: openvas-discussopenvas-discuss@wald.intevation.org; Subject: Re: [Openvas-discuss] R: Problems compiling

[Openvas-discuss] Problems compiling OpenVAS 7.x

2014-11-06 Thread Winfried Neessen
Hi everyone, I've been struggling around with this for a while now... I am running CentOS 6.5 which - of course - has pretty outdated libs. Therefore I am compiling OpenVAS and the corresponding libs from source. I've built the latest libs (libnettle 2.7.1 (which actually isn't the

Re: [Openvas-discuss] R: Problems compiling OpenVAS 7.x

2014-11-06 Thread Winfried Neessen
- still my C knowledge is to rusted, to debug this in the code. Thanks Winni From: paky...@libero.it To: Winfried Neessen nees...@cleverbridge.com Sent: Thursday, November 6, 2014 12:55:29 PM Subject: R: [Openvas-discuss] Problems compiling OpenVAS 7.x Hi, try to use gnutls 3.2.0

Re: [Openvas-discuss] reply

2014-11-04 Thread Winfried Neessen
Hi, if you expect to get any help on this list, you need to a) provide more details about what your problem is, what you did/tried, what system you are running and b) stop sending out senseless one-line mails. Your log says: Checking for old OpenVAS Scanner = 2.0 ...

Re: [Openvas-discuss] installation problem

2014-11-03 Thread Winfried Neessen
Hi, not sure what that empty mail is meant for, but I suppose you are refering to the error in the attached log... Checking OpenVAS SCAP database ... ERROR: No OpenVAS SCAP database found. (Tried: /var/lib/openvas/scap-data/scap.db) FIX: Run a SCAP synchronization script like

Re: [Openvas-discuss] Replace SSL cert on OpenVAS appliance

2014-10-02 Thread Winfried Neessen
Hi Jeff, How can I replace the SSL certs on the OpenVAS appliance with certificates signed by own CA that my browsers trust? you need to tell GSAD which certificate to use. The following parameters will do the job: -c /usr/pkg/openvas/var/lib/openvas/CA/your.public.certificate.pem -k

Re: [Openvas-discuss] spam out of gpgme-Messages

2014-07-29 Thread Winfried Neessen
Hi, The two messages are: base gpgme-Message: Using OpenPG engine version '2.0.14‘ base gpgme-Message: Setting GnuPG homedir to '/etc/openvas/gnupg‘ i still have this problem. No Ideas? Try to add no-greeting to the gpg.conf in /etc/openvas/gnupg Winni

Re: [Openvas-discuss] documentation

2014-06-13 Thread Winfried Neessen
Hi, this is of course personal taste, but I prefer DokuWiki. Much simpler and not as bloated as MediaWiki. For most small projects, it's more than enough (plus no database is required)- so I would recommend that instead of MediaWiki. Winni - Original Message - From: William

Re: [Openvas-discuss] FW: certificate issue

2014-06-10 Thread Winfried Neessen
Hi, Checking for old OpenVAS Scanner = 2.0 ... /usr/bin/openvas-check-setup: 171: /usr/bin/openvas-check-setup: openvasd: not found It is not able to find the openvasd in the $PATH env. You have either not installed it correctly or you installed in at a path, that is not in your $PATH

Re: [Openvas-discuss] Installation

2014-05-16 Thread Winfried Neessen
] On Behalf Of Vijay Anand S P Sent: Thursday, May 15, 2014 6:01 PM To: Winfried Neessen Cc: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Installation It would be great, if you could provide us PHP Implementation.. On Thu, May 15, 2014 at 9:22 PM, Winfried Neessen nees

Re: [Openvas-discuss] Installation

2014-05-15 Thread Winfried Neessen
Hi, OMP is a protcol. It is not bound to any of the packages. Either fo these packages are OpenVAS. The one is a virtual appliance (which brings a VM with OS and all needed packages). Binary packages are the packages that bring OpenVAS to your local OS installation and the source packages are

[Openvas-discuss] Mandatory key is missing

2014-04-24 Thread Winfried Neessen
Hi, I am trying to launch a scan in OpenVAS which only tests for the Heartbleed vuln. Therefore I created a scan config, which only has the two 'General/OpenSSL heartbeat' check activated. In the port list, I only assigned 443/tcp, 25/tcp, 143/tcp, 110/tcp, 993/tcp and 995/tcp, so only SSL and

Re: [Openvas-discuss] GSA Internal error get_config_family:7378

2014-04-23 Thread Winfried Neessen
is struggling with this. BR, Winfried From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Winfried Neessen Sent: Wednesday, April 16, 2014 10:08 AM To: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] GSA Internal error get_config_family:7378

Re: [Openvas-discuss] GSA Internal error get_config_family:7378

2014-04-16 Thread Winfried Neessen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I re-ran an update and a rebuild... still this is happening. Any ideas? Thanks Winfried From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Winfried Neessen Sent: Thursday, April 10, 2014 10:14 AM

[Openvas-discuss] How to import exportet tasks?

2014-02-03 Thread Winfried Neessen
Hi, I am wondering how I can import an exported task from another OpenVAS server or another user profile? I can see the export buttons, which will provide me with an XML file, but I haven't figured out yet, how to import them back into the system. Any hint on how to accomplish this? Thanks

Re: [Openvas-discuss] Installing Openvas on Centos 6.4 64bit error

2013-11-22 Thread Winfried Neessen
Hi Götz, you are missing some requirements: error: /usr/lib64/libopenvas_nasl.so.6: undefined symbol: wmi_reg_set_qword_val I assume that WMI is missing here as dependency of the libopenvas_nasl library. [i] Checking MD5 checksum: /usr/bin/md5sum: /md5sums: Datei oder Verzeichnis nicht

[Openvas-discuss] OpenVAS (false-positive) reports about 1.3.6.1.4.1.25623.1.0.802037

2013-09-09 Thread Winfried Neessen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I am running a network vuln. scan using OpenVAS 6 (with Greenbone Feed). It repeatedly reports that our windows 2k8 servers are prone for: Azeotech DAQFactory NETB Datagram Parsing Stack Buffer Overflow Vulnerability (OID:

Re: [Openvas-discuss] Restructuring OpenVAS Steering Team

2013-09-03 Thread Winfried Neessen
Hi Geoff, is there some public repository or similar available, where people can throw anything towards the documentation group? Are there any open tasks or some priorization list where things are defined where documentation is missing and is urgently needed? BR, Winni -Original

[Openvas-discuss] Easy startup script for self-compiled OpenVAS

2013-08-21 Thread Winfried Neessen
Hi, while following this list for a couple of weeks now, I noticed that a lot of people are using a self-compiled version of OpenVAS and that people tend to start the services manually, so I though I should share a startup script for OpenVAS, which I wrote for our environment. It lets you

[Openvas-discuss] OpenVAS hangs while storing Windows Credentials / GnuPG

2013-06-18 Thread Winfried Neessen
Hi, I was just about to store a new set of Windows Credentials in OpenVAS 6. After I press the submit button, OpenVAS hangs infinite. In the openvasmd.log I can see the following messages: base gpgme:MESSAGE:2013-06-18 09h28.09 :15131: Setting GnuPG homedir to

Re: [Openvas-discuss] OpenVAS hangs while storing Windows Credentials / GnuPG

2013-06-18 Thread Winfried Neessen
than 32 minutes. Winfried From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Winfried Neessen Sent: Tuesday, June 18, 2013 11:57 AM To: openvas-discuss@wald.intevation.org Subject: [Openvas-discuss] OpenVAS hangs while storing Windows Credentials / GnuPG

[Openvas-discuss] Perl Module for OMP

2013-06-12 Thread Winfried Neessen
Hi all, as I wanted to use the OpenVAS CVE reports within a Perl-Script, I thought it would be useful to use the OMP such purpose. As there seems no existing Perl-Module for such task, I took some time and wrote one. You can find it on CPAN: http://search.cpan.org/~wneessen/OpenVAS-OMP_0.04/