topic Re: Scanning with Nessus in Operating System - HP-UX

Scanning with Nessus

Fred K. Abell Jr._1 — Tue, 06 Feb 2007 12:05:19 GMT

Greetings:

I have installed Nessus from the HP-UX Internet Express package. I have done nessus-adduser, nessus-mkcert, and started the nessusd. When I start the nessus client and try to log into one of the users I added, I get the following error:

[1102] SSL_connect: error:00000000:lib(0):func(0):reason(0)

and a GUI with SSL error pops open.

I currently have openssl installed. Any Ideas of what is going on?

Fred

Re: Scanning with Nessus

Steven E. Protter — Tue, 06 Feb 2007 12:23:40 GMT

Shalom,

You should check that ssl is properly configured and the right version that nessus needs is installed. I'm not sure if the depot version checks that at install time, but it should.

Tell me how you are running the GUI. Are you connected via CDE, is your DIPLAY variable set and is the font server running, /etc/rc.config.d/xfs or /sbin/init.d/xfs start

SEP

Re: Scanning with Nessus

Fred K. Abell Jr._1 — Tue, 06 Feb 2007 12:43:46 GMT

I am running in CDE, logged in as root, running the default setup. The depot version of openssl is A.00.09.7i.012.

Fred

Re: Scanning with Nessus

Steven E. Protter — Tue, 06 Feb 2007 14:28:50 GMT

Shalom Fred,

Check the release notes, but I tink I have some ideas.

Some ssl configuration is required before you use nessus.

http://www.ce.chalmers.se/edu/course/EDA262/Lab3.pdf

http://www.nessus.org/news/

http://www.nessus.org/documentation/nessus_3.0_client_guide.pdf

http://people.freebsd.org/~fenner/portsurvey/security.html

Seems a security certificate is required. I'd be shocked if the nessus setup documentation doesn't mention it.

SEP

Re: Scanning with Nessus

Steven E. Protter — Wed, 07 Feb 2007 01:56:43 GMT

Fellow forumers.

Doing a little extra on this thread. Offline email exchange. It can be fun.

Message received during testing of nessus.

Connection from 127.0.0.1 is rejected by libwrap

Do we agree that tcpwrappers may be interfering with the operation of this procuct? If so, whats the fix to the tcpwrappers config file?

SEP

Re: Scanning with Nessus

Fred K. Abell Jr._1 — Wed, 07 Feb 2007 09:53:28 GMT

OK,

I entered into my /etc/hosts.allow file the following:

nessusd 127.0.0.1:allow

and it got past the logging in problem.

Thanks for all the help SEP

Fred