OpenVAS – Status code: 503, Status message: Service temporarily down

2584 단어
Posted on 02/09/2016
by bisser.todorov
—
7 Comments ↓
If you try to start a task you’ll get: 
Operation: Start Task
Status code: 503
Status message: Service temporarily down

In/var/lib/openvasmd.log you can find something like this: 
lib serv:WARNING:2016-09-02 08h21.18 UTC:4546: Failed to shake hands with peer: The TLS connection was non-properly terminated.
lib serv:WARNING:2016-09-02 08h21.18 UTC:4546: Failed to shutdown server socket
event task:MESSAGE:2016-09-02 08h21.18 UTC:4546: Task 256f8360-1ec7-4675-a6ab-415fd5fb9483 could not be started by admin

The fix is mentioned in a text document you can find here or just following the steps bellow:
  • Stop scanner 
    systemctl stop openvas-scanner
  • Stop manager 
    systemctl stop openvas-manager
  • Make the certs with the command (pressing enter will fill in the defaults in the brackets): 
    openvas-mkcert -f
  • Make the client certs with the command: 
    openvas-mkcert-client -i -n
  • Get the scanner uid with the command (gives you an uid like “08b69003-5fc2-4037-a479-93b440211c73”): 
    openvasmd --get-scanners
  • Update scanner and keys with the command (you will need to replace the uid in this command with the uid provided from the previous step): 
    openvasmd --modify-scanner "08b69003-5fc2-4037-a479-93b440211c73" --scanner-ca-pub /var/lib/openvas/CA/cacert.pem --scanner-key-pub /var/lib/openvas/CA/clientcert.pem --scanner-key-priv /var/lib/openvas/private/CA/clientkey.pem
    For Debian it can be slightly different. Thanks mansuamen: 
    openvasmd –modify-scanner “08b69003-5fc2-4037-a479-93b440211c73” –scanner-ca-pub /usr/local/var/lib/openvas/CA/cacert.pem –scanner-key-pub /usr/local/var/lib/openvas/CA/clientcert.pem –scanner-key-priv /usr/local/var/lib/openvas/private/CA/clientkey.pem
  • Sync the feeds using the command: 
    openvas-nvt-sync
  • Start the scanner using the command: 
    systemctl start openvas-scanner
  • Rebuild openvas databases using the command: 
    openvasmd --rebuild
  • Start openvas manager using the command: 
    systemctl start openvas-manager
  • Start Greenbone using the command: 
    systemctl start gsad
    • Fluentd 버퍼 테스트 하기(3) - Buffer 테스트 진행 및 결과
    트 리 데이터 구조 (기초 트 리) 의 특징 과 응용 장면

    좋은 웹페이지 즐겨찾기

    개발자 우수 사이트 수집

    개발자가 알아야 할 필수 사이트 100선 추천 우리는 당신을 위해 100개의 자주 사용하는 개발자 학습 사이트를 정리했습니다
    best100-homepage