Scanning with Nessus

[Fred K. Abell Jr._1]

Greetings:

I have installed Nessus from the HP-UX Internet Express package. I have done nessus-adduser, nessus-mkcert, and started the nessusd. When I start the nessus client and try to log into one of the users I added, I get the following error:

[1102] SSL_connect: error:00000000:lib(0):func(0):reason(0)

and a GUI with SSL error pops open.

I currently have openssl installed. Any Ideas of what is going on?

Fred

[Steven E. Protter]

Shalom,

You should check that ssl is properly configured and the right version that nessus needs is installed. I'm not sure if the depot version checks that at install time, but it should.

Tell me how you are running the GUI. Are you connected via CDE, is your DIPLAY variable set and is the font server running, /etc/rc.config.d/xfs or /sbin/init.d/xfs start

SEP

[Fred K. Abell Jr._1]

I am running in CDE, logged in as root, running the default setup. The depot version of openssl is A.00.09.7i.012.

Fred

[Steven E. Protter]

Shalom Fred,

Check the release notes, but I tink I have some ideas.

Some ssl configuration is required before you use nessus.

http://www.ce.chalmers.se/edu/course/EDA262/Lab3.pdf

http://www.nessus.org/news/

http://www.nessus.org/documentation/nessus_3.0_client_guide.pdf

http://people.freebsd.org/~fenner/portsurvey/security.html

Seems a security certificate is required. I'd be shocked if the nessus setup documentation doesn't mention it.

SEP

[Steven E. Protter · Accepted solution]

Fellow forumers.

Doing a little extra on this thread. Offline email exchange. It can be fun.

Message received during testing of nessus.

Connection from 127.0.0.1 is rejected by libwrap

Do we agree that tcpwrappers may be interfering with the operation of this procuct? If so, whats the fix to the tcpwrappers config file?

SEP

[Fred K. Abell Jr._1]

OK,

I entered into my /etc/hosts.allow file the following:

nessusd 127.0.0.1:allow

and it got past the logging in problem.

Thanks for all the help SEP

Fred