On Wed, Dec 17, 2003 at 03:48:40PM +0000, Mark Watts wrote:

> I've created a user/certificate now and put the .pem files in ~/nessus/ for my 
> user. I ran nessus once from the console (as my user) to generate a .nessusrc 
> file and then added the three settings you mentioned at the beginning of this 
> thread.
> 
> When I run nessus now, I have to enter a password. If I use something random, 
> I get some dialogues about ssl certificates (which is promising) however I 
> then get a 'Login failed' message. (Argh!)

I made a slight mistake before in step 3b -- the client config file
expects the parameter trusted_ca rather than ca_file to point to the
CA's certificate.  If that doesn't fix the problem, give me some idea
what those dialogues say. 

> How do I set a password for this user, and do I have to actually do this since 
> I'm using certificates.

The nessus client will always prompt for a password / passphrase.  If
you're using pubkey auth, it will use it to decrypt your private key
only if it needs to.  In one of my earlier messages, I told you how to
encrypt the private keys using the openssl rsa command.  If you did
that, you should enter the passphrase as your password; otherwise, any
non-null string should work. 


George
-- 
[EMAIL PROTECTED]

Attachment: pgp00000.pgp
Description: PGP signature

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to