Hi guys,
I installed nessus 2.2.3 from Debian Sarge packages() om my debian
host, downloaded nessuwx and I get "server doesn't have valid X.509
certificate".
From my nessusd.conf :
# Define SSL version, use NONE to disable SSL
# ssl_version = 3
# Full path and filename of a trusted certificate authority
# see /usr/share/doc/nessus/README_SSL.gz
# trusted_ca =
(as default in debian packages)
# Added by nessus-mkcert
#
cert_file=/var/lib/nessus/CA/servercert.pem
key_file=/var/lib/nessus/private/CA/serverkey.pem
ca_file=/var/lib/nessus/CA/cacert.pem
(all this files exist in right place)
When I tried to do
openssl s_client -connect 127.0.0.1:1241 -tls1
I get following:
CONNECTED(00000003)
7033:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake
failure:s3_pkt.c:529:
When I'm connecting with NessusWX from my WinXP box :
gw01:~# cat /var/log/nessus/nessusd.messages
[Fri May 20 11:44:48 2005][6727] nessusd 2.2.3. started
[Fri May 20 11:45:11 2005][6727] Connection from 192.168.0.40 rejected
by libwrap
[Fri May 20 11:46:12 2005][6727] received the TERM signal
[Fri May 20 11:50:00 2005][6807] nessusd 2.2.3. started
[Fri May 20 11:59:57 2005][6807] Connection from 192.168.0.40 rejected
by libwrap
[Fri May 20 12:01:16 2005][6807] Connection from 127.0.0.1 rejected by libwrap
[Fri May 20 12:12:25 2005][6807] Connection from 192.168.0.40 rejected
by libwrap
And when I'm running nessusd -D it writes nothing about ssl.
I have openssl 0.9.7e and libssl 0.9.7e installed
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
