Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run OpenVAS scans via OSP instead of OTP #422

Merged
merged 26 commits into from
Jun 7, 2019

Commits on Mar 12, 2019

  1. Add scanner type "OSP-OpenVAS"

    This new scanner type uses OpenVAS scan configs and connects to an OSP
    scanner (ospd-openvas).
    timopollmeier committed Mar 12, 2019
    Configuration menu
    Copy the full SHA
    ad4950c View commit details
    Browse the repository at this point in the history
  2. Convert OpenVAS config preferences to OSP

    OSP expects boolean preferences to be 1 or 0 instead of "yes" or "no"
    and only the selected value for selection preferences.
    timopollmeier committed Mar 12, 2019
    Configuration menu
    Copy the full SHA
    1372610 View commit details
    Browse the repository at this point in the history

Commits on Mar 15, 2019

  1. Configuration menu
    Copy the full SHA
    8694edf View commit details
    Browse the repository at this point in the history

Commits on May 21, 2019

  1. Configuration menu
    Copy the full SHA
    6565f37 View commit details
    Browse the repository at this point in the history

Commits on May 22, 2019

  1. Fetch OSP results while scan is running

    Without this OSP tasks had to wait until the end of the scan before
    fetching any results, which could take a long time for scanners like
    the OpenVAS one and tasks with many target hosts.
    timopollmeier committed May 22, 2019
    Configuration menu
    Copy the full SHA
    17d1f3c View commit details
    Browse the repository at this point in the history
  2. Handle OpenVAS scanner host details in OSP

    This parses results with the "general/Host_Details" port as host details
    as it is done in OTP.
    This should eventually be handled by the "Host Detail" result type once
    there is a well-defined way to handle the source info in OSP.
    timopollmeier committed May 22, 2019
    Configuration menu
    Copy the full SHA
    6e93b87 View commit details
    Browse the repository at this point in the history

Commits on May 23, 2019

  1. Adjust OSP credentials auth data

    The credentials for OSP scans are adjusted for the change in gvm-libs to
    use the new method of storing the authentication data like username
    and password.
    timopollmeier committed May 23, 2019
    Configuration menu
    Copy the full SHA
    417211d View commit details
    Browse the repository at this point in the history
  2. Allow usk credentials in target_osp_ssh_credential

    This allows using SSH private key authentication in OSPd-OpenVAS scans.
    timopollmeier committed May 23, 2019
    Configuration menu
    Copy the full SHA
    a1c241f View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    4410854 View commit details
    Browse the repository at this point in the history

Commits on May 24, 2019

  1. Don't get unused connecting to OSP file socket

    The osp_scanner_connect function will no longer try to get the port,
    ca_pub, key_pub and key_priv from the scanner as they are not needed
    and getting the private key could fail if the scanner has no credential.
    timopollmeier committed May 24, 2019
    Configuration menu
    Copy the full SHA
    b19e248 View commit details
    Browse the repository at this point in the history
  2. Handle HOST_START and HOST_END in OSP scans

    OSP results with "HOST_START" and "HOST_END" as NVT id will be used to
    set the start and end time of a host.
    timopollmeier committed May 24, 2019
    Configuration menu
    Copy the full SHA
    2adcf64 View commit details
    Browse the repository at this point in the history

Commits on May 27, 2019

  1. Configuration menu
    Copy the full SHA
    fdf2988 View commit details
    Browse the repository at this point in the history

Commits on May 28, 2019

  1. Configuration menu
    Copy the full SHA
    664a34d View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    e29df9e View commit details
    Browse the repository at this point in the history
  3. Get hostname for OSP scan results

    The parse_osp_report() function will now get the hostname attribute from
    OSP results and make_osp_result() will store it in the results table.
    timopollmeier committed May 28, 2019
    Configuration menu
    Copy the full SHA
    6117fb6 View commit details
    Browse the repository at this point in the history

Commits on May 29, 2019

  1. Configuration menu
    Copy the full SHA
    1f5daca View commit details
    Browse the repository at this point in the history

Commits on May 30, 2019

  1. Configuration menu
    Copy the full SHA
    a4061cc View commit details
    Browse the repository at this point in the history

Commits on May 31, 2019

  1. Configuration menu
    Copy the full SHA
    c9b5d98 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2019

  1. Configuration menu
    Copy the full SHA
    1608f12 View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2019

  1. Use OSP for all OpenVAS scans

    The OSP-OpenVAS scanner type is removed again in favor of running all
    OpenVAS scans via OSP instead of OTP.
    timopollmeier committed Jun 5, 2019
    Configuration menu
    Copy the full SHA
    1294b42 View commit details
    Browse the repository at this point in the history
  2. Get report from task in stop_osp_task

    The process running the function may not have global_current_report set,
    so the current report has to be fetched from the task.
    timopollmeier committed Jun 5, 2019
    Configuration menu
    Copy the full SHA
    cdda304 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    d927c29 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    9d8cc77 View commit details
    Browse the repository at this point in the history
  5. Use new struct-based osp_start_scan_ext

    The osp_start_scan_ext function has been changed to have most options
    passed in as a new struct type (osp_start_scan_opts_t).
    timopollmeier committed Jun 5, 2019
    Configuration menu
    Copy the full SHA
    3559900 View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2019

  1. Add warning if OSP connection fails

    The osp_scanner_connect function will now log a warning message
    containing the hostname or socket path.
    timopollmeier committed Jun 7, 2019
    Configuration menu
    Copy the full SHA
    70de168 View commit details
    Browse the repository at this point in the history
  2. Fix uninitialized variables

    The variables start_time and end_time in the parse_osp_report function
    and rc in the handle_osp_scan function were not initialized.
    timopollmeier committed Jun 7, 2019
    Configuration menu
    Copy the full SHA
    53836d1 View commit details
    Browse the repository at this point in the history