Nessus的安装和使用（中）
********** We are going to ask you some question for each client certificate If some question has a default answer, you can force an empty answer by entering a single dot '.' ********* User #1 name (e.g. Nessus username): admin Client certificates life time in days [365]:admin Country (two letter code) [CN]: CN State or province name [BJ]: Location (e.g. town) [BJ]: Organization [Test]: Organization unit [Test]: e-mail []: admin@test.com Generating RSA private key, 1024 bit long modulus ......................++++++ ...................++++++ e is 65537 (0x10001) You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [FR]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (eg, your name or your server's hostname) []:Email Address []:Using configuration from /tmp/nessus-mkcert.6217/stdC.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'CN' stateOrProvinceName :PRINTABLE:'BJ' localityName :PRINTABLE:'BJ' organizationName :PRINTABLE:'Test' organizationalUnitName:PRINTABLE:'Test' commonName :PRINTABLE:'admin' emailAddress :IA5STRING:'admin@test.com' Certificate is to be certified until May 25 17:37:42 2008 GMT (365 days) Write out database with 1 new entries Data Base Updated User rules ---------- nessusd has a rules system which allows you to restrict the hosts that has the right to test. For instance, you may want him to be able to scan his own host only. Please see the nessus-adduser(8) man page for the rules syntax Enter the rules for this user, and hit ctrl-D once you are done: (the user can have an empty rules set) User added to Nessus. Another client certificate? n Your client certificates are in /tmp/nessus-mkcert.6217 ；证书在/tmp/nessus-mkcert.6217,要妥善保存 You will have to copy them by hand 7.将证书放到nessus的证书目录下 [root@test8 /]# cd /tmp/nessus-mkcert.6217/ [root@test8 nessus-mkcert.6217]# ls 01.pem index.txt req_admin.pem stdC.cnf cert_admin.pem index.txt.old serial cert_nessuswx_admin.pem key_admin.pem serial.old [root@test8 nessus-mkcert.6217]# cp *.pem /opt/nessus/com/nessus/CA/ 8安装并启用NessussClient [root@test8 /]# mv NessusClient-1[1].0.2-es4.i386 NessusClient.rpm [root@test8 /]# rpm -ivh NessusClient.rpm [root@test8 /]#NessussClient 本文出自 51CTO.COM技术博客 |
BillowG
博客统计信息
热门文章
最新评论
友情链接