mikesplain / openvas-docker

A Docker container for Openvas
MIT License
770 stars 305 forks source link

Fix test.sh verification #248

Closed FiveOFive closed 4 years ago

FiveOFive commented 4 years ago

Problem

openvas-check-setup is out of date and fails validating certificates. The failure is seen in the travis ci build failure logs - https://travis-ci.org/github/mikesplain/openvas-docker/builds/676746746

Step 1: Checking OpenVAS Scanner ... 

        OK: OpenVAS Scanner is present in version 5.1.3.

        OK: OpenVAS Scanner CA Certificate is present as .

dirname: missing operand

Try 'dirname --help' for more information.

        ERROR: No server certificate file of OpenVAS Scanner found.

        FIX: Run 'openvas-mkcert -f -q'.

 ERROR: Your OpenVAS-9 installation is not yet complete!

Proposed Solution

openvas-check-setup is no longer developed (https://community.greenbone.net/t/where-can-i-download-openvas-check-setup/936). The proposed solution is to stop using openvas-check-setup. I have replaced it with openvas-manage-certs -V to at least have a validation check on certificates.

Testing

build output contains the new openvas-manage-certs -V check

Checking certificates
OK: Directory for keys (/var/lib/openvas/private/CA) exists.
OK: Directory for certificates (/var/lib/openvas/CA) exists.
OK: CA key found in /var/lib/openvas/private/CA/cakey.pem
OK: CA certificate found in /var/lib/openvas/CA/cacert.pem
OK: CA certificate verified.
OK: Certificate /var/lib/openvas/CA/servercert.pem verified.
OK: Certificate /var/lib/openvas/CA/clientcert.pem verified.

OK: Your OpenVAS certificate infrastructure passed validation.

./test.sh now passes and outputs Greenbone started successfully!

fredairic[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 30 days if no further activity occurs. Thank you for your contributions.

fredairic[bot] commented 4 years ago

This issue has been automatically closed because it has not had recent activity. Issue creator may reopen if the issue still exists. Thank you for your contributions.