On Fri, 27 Dec 2002, Wikes, Jonathan wrote:

> I am trying to install the latest version of Nessus onto a Mandrake Linux
> 9.0
> machine, and am having some problems when I run "nessus-mkcert". When I run
> this program, I get the errorlog I've tacked onto the end of this message.
>
> It indicates that the file /usr/local/com/nessus/cacert.pem does not exist,
> and sure enough it isn't there.

Actually, the problem originates while generating the certificate request -
see below.

> What am I doing wrong, or
> how do I get a proper "cacert.pem" file generated, or should
> "nessus-mkcert"
> be doing this??

cacert.pem is the PEM-encoded certificate for a certificate authority
(CA).  To get it, it's necessary to first generate a certificate
request.  And once you have it, you can then generate your nessus server
certificate (and perhaps also client certificates, using
nessus-mkcert-client).

nessus-mkcert should handle generating the CA and server certs as well
as the respective requests for you, but the log below indicates a
problem.  If you can't fix it, you could alternatively generate the
certifcates by hand using OpenSSL.  Or purchase them from a commercial
certificate authority (eg, Verisign).

> You are about to be asked to enter information that will be incorporated
> into your certificate request.
...
> Country Name (2 letter code) [FR]:State or Province Name (full name)
> [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company)
> [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section)
> []:problems making Certificate Request

     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ here's the true problem

> 754:error:0D11A0A3:asn1 encoding routines:ASN1_mbstring_copy:string too
> long:a_mbstr.c:154:maxsize=64

This suggests one of the parameters in the request is limited to 64
characters and you exceeded that limit.  What were your responses to the
prompts?


George
-- 
[EMAIL PROTECTED]
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to