Thursday, December 8, 2016

openvas is having a bad day on debian 8.2

 openvas is having a bad day on debian 8.2  
   
 i am seeing:  
   
 Operation: Start Task  
 Status code: 503  
 Status message: Service temporarily down  
   
 and to make things worse:  
   
 lib serv:WARNING:2016-12-07 10h00.00 UTC:4546: Failed to shake hands with peer:   
 The TLS connection was non-properly terminated.  
 lib serv:WARNING:2016-12-07 10h00.00 UTC:4546: Failed to shutdown server socket  
 event task:MESSAGE:2016-12-07 10h00.00 UTC:4546: Task could not be started by admin  
   
 great.  
   
 that means my certs are out of date. guess i need to update them.  
   
 # systemctl stop openvas-scanner  
 # systemctl stop openvas-manager  
 # openvas-mkcert -f  
 # openvas-mkcert-client -i -n  
 # openvasmd --get-scanners  
   
 08b69003-5fc2-4037-a479-93b440211c73 OpenVAS Default <- unique to each install  
   
 # ls -la /usr/local/var/lib/openvas/private/CA/  
   
 yes. that's where the keys are located.  
   
 # openvasmd --modify-scanner "08b69003-5fc2-4037-a479-93b440211c73" \  
 --scanner-ca-pub /usr/local/var/lib/openvas/CA/cacert.pem \  
 --scanner-key-pub /usr/local/var/lib/openvas/CA/clientcert.pem \  
 --scanner-key-priv /usr/local/var/lib/openvas/private/CA/clientkey.pem  
   
 # openvas-nvt-sync  
 # openvasmd --rebuild  
 # systemctl start openvas-manager  
 # systemctl start gsa  
   
 done  

No comments: