Currently running latest Bundle:CPAN W/
cpan[15] install IO::Socket
IO::Socket is up to date (1.30).
+ cpan[16] install IO::Socket::SSL
IO::Socket::SSL is up to date (1.13).
+ cpan[17] install IO::Socket::INET
IO::Socket::INET is up to date (1.31).
Using Scanlite.pm in conjunction with SSL.pm absolutely no problems until now with release of Nessu
+s 3.2.1
On every distro I have tried / tested (Redhat EL4/Fedora/Mandriva 2008) I now get the following err
+or with test script
[root@fs1 tmp]# ./test.pl
CA file certs/my-ca.pem not found, using CA path instead.
DEBUG: /usr/lib/perl5/site_perl/5.8.8/IO/Socket/SSL.pm:1010: IO::Socket::SSL::SSL_Context HASH(0x72
+7ac0)
DEBUG: /usr/lib/perl5/site_perl/5.8.8/IO/Socket/SSL.pm:1128: new ctx 11779744
IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)
at ./test.pl line 19
DEBUG: /usr/lib/perl5/site_perl/5.8.8/IO/Socket/SSL.pm:1163: free ctx 11779744 open=11779744
DEBUG: /usr/lib/perl5/site_perl/5.8.8/IO/Socket/SSL.pm:1166: OK free ctx 11779744
Nessus login failed %d: %s
1Connect to 192.168.0.250:1241 failed. (IO::Socket::INET configuration failederror:00000000:lib(0):
+func(0):reason(0)) at ./test.pl line 44.
#!/usr/bin/perl
use Net::Nessus::ScanLite;
my $nessushost = "localhost";
my $nessusport = "1241";
my $nessus = Net::Nessus::ScanLite->new(
host => $nessushost,
port => $nessusport,
ssl => 1 # comment or set to 1 out if using ssl
);
$nessus->preferences( { host_expansion => 'none', safe_checks => 'yes', checks_read_timeout => 1
+ });
$nessus->plugin_set("10835;10861;11808;11921;11790");
my $addr = "10.0.0.1";
if( $nessus->login("inprotect", "inprotect" ) )
{
$nessus->attack($addr);
printf("Total info's = %d\n",$nessus->total_info);
foreach( $nessus->info_list )
{
my $info = $_;
printf("Info:\nID: %s\nPort: %s\nDessc: %s\n",
$info->ScanID,
$info->Port,
$info->Description);
}
printf("Total hole's = %d\n",$nessus->total_holes);
foreach( $nessus->hole_list )
{
my $info = $_;
printf("Info:\nID: %s\nPort: %s\nDessc: %s\n",
$info->ScanID,
$info->Port,
$info->Description);
}
}
else
{
die("Nessus login failed %d: %s\n",$nessus->code,$nessus->error);
}
Should be SSL_version = TLSv1
would something have changed that is affecting SSL implementation or a bug exists in Scanlite.pm or
+ SSL.pm code that was a little more forgiving in previous versions of Nessus?
