Hi, I'm not sure if I missed a reply for my issue or whether the problem is so severe that I need to reinstall OpenVAS from scratch.
Cheers, Marcin -----Original Message----- From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Marcin Szatkowski Sent: 03 November 2016 08:46 To: Reindl Harald <h.rei...@thelounge.net>; openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Service temporarily down - status code 503 Hi, Thank you very much for all the tips and guides. I managed to go through the procedure advised by Christian at http://plugins.openvas.org/ova_503.txt . I had to modify the paths to the certificates slightly as they seem be located directly under /var/lib instead of /usr/local/var/lib. There was also no command for systemctl start gsa. I found a similar one which was systemctl start greenbone-security-assistant.service. I assume that's the one I need. I also had to remove the old certificate from Firefox in order to access the GSA website. I'm using Kali Linux by the way. I'm not getting the status code 503 anymore. However now whenever I click on Start button next to any task I've got preconfigured the only thing that happens is the spinning wheel in Firefox. When I refresh the website after couple of minutes of inactivity Status of the Task stays on Done and does not change to Requested or Running. Best regards, Marcin Marcin Szatkowski Lead Network Engineer Twisted Fish Limited 020 3141 6274 020 8940 4933 07887 886 775 mailto:marcin.szatkow...@twistedfish.com This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. -----Original Message----- From: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] On Behalf Of Reindl Harald Sent: 02 November 2016 15:11 To: openvas-discuss@wald.intevation.org Subject: Re: [Openvas-discuss] Service temporarily down - status code 503 interesting that one needs also "openvasmd --modify-scanner" and why in the world are they only valid for 365 days? "openvas-mkcert -f" asks and you can enter 3650 "openvas-mkcert-client -i -n" don't ask frankly when you have everything except GSA configured to listen and connect only on 127.0.0.1 that whole TLS dance is so useless the website is BTW missing "systemctl stop openvas-gsa.service" at the begin, otherwise the start-command don't make much sense __________________________________________ on Fedora that would mean: systemctl stop openvas-scanner.service openvas-manager.service openvas-gsa.service openvas-mkcert -f openvas-mkcert-client -i -n openvasmd --get-scanners openvasmd --modify-scanner "08b69003-5fc2-4037-a479-93b440211c73" --scanner-ca-pub /etc/pki/openvas/CA/cacert.pem --scanner-key-pub /etc/pki/openvas/CA/clientcert.pem --scanner-key-priv /etc/pki/openvas/private/CA/clientkey.pem openvas-nvt-sync openvasmd --rebuild systemctl start openvas-manager systemctl start openvas-gsa.service __________________________________________ if the scan still fails it's likely because the scanner did fail to start and so a "systemctl restart openvas-scanner.service" may help Operation: Start Task Status code: 503 Status message: Service temporarily down ? openvas-scanner.service - OpenVAS Scanner Loaded: loaded (/etc/systemd/system/openvas-scanner.service; enabled; vendor preset: disabled) Active: failed (Result: signal) since Mi 2016-11-02 15:53:43 CET; 13min ago Process: 707 ExecStart=/usr/sbin/openvassd -f $SCANNER_PORT $SCANNER_LISTEN $SCANNER_SRCIP (code=killed, signal=KILL) Main PID: 707 (code=killed, signal=KILL) __________________________________________ Am 02.11.2016 um 09:32 schrieb Christian Fischer: > Hi, > > On 28.10.2016 16:18, Marcin Szatkowski wrote: >> I was also messing around with certificates so that might be one of the >> issues. I went through countless troubleshooting steps and articles. > > the certificates are most likely your issue here. Have you also found > this step-by-step tutorial how to create a fresh certificate setup > which should solve your issue here: > > http://plugins.openvas.org/ova_503.txt > >> OpenVAS Scanner 5.0.5 >> OpenVAS Manager 6.0.8 >> Greenbone Security Assistant 6.0.10 > > You might also want to update these components as they are quite outdated: > > http://openvas.org/install-source.html _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ------------------------------------------------------------- This email was processed through the Twisted Fish spam filter to filter junk messages. If you feel this message has been tagged incorrectly, you can change its category by clicking the link below. Click here http://email.twistedfish.com:5272/FrontController?operation=mbeu&f=00001_-68_20161102_5727760.eml&chkBayesian=1&pr=1&mt=1&ma=s to mark email as junk. ------------------------------------------------------------- _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss ------------------------------------------------------------- This email was processed through the Twisted Fish spam filter to filter junk messages. If you feel this message has been tagged incorrectly, you can change its category by clicking the link below. Click here http://email.twistedfish.com:5272/FrontController?operation=mbeu&f=00001_-108_20161107_5767632.eml&chkBayesian=1&pr=1&mt=1&ma=s to mark email as junk. ------------------------------------------------------------- _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
