Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To update the certificates with new ones, customer can run the following commands as the root user on the Snare Central Server from the CLI prompt.

as the root user shell:

$ sudo openvas-manage-certs -a -f

service $ sudo systemctl restart openvas-scanner
$ sudo systmectl restart
service openvas-manager
$sudo systemctl restart
service openvas-gsa restart

Then you can validate the cert dates status using the following commands

$ cat /var/lib/openvas/CA/clientcert.pem | openssl x509 -noout -dates
$ cat /var/lib/openvas/CA/cacert.pem | openssl x509 -noout -dates
$ cat /var/lib/openvas/CA/servercert.pem | openssl x509 -noout -dates

...

Second option is to stop the service then disable the service from starting from a reboot.

service $ sudo systemctl stop openvas-gsa

$ sudo systemctl stop openvas-scanner

$sudo systemctl stop openvas-manager

$ sudo systemctl disable openvas-gsa

$sudo systemctl disable openvas-scanner

$sudo systemctl disable openvas-manager