| | | Generating a Server Certificate |
For security reasons, communication between the OpenVAS server and client is only possible through SSL encrypted connections. In order to establish an SSL encrypted connection, the server needs to have an SSL certificate. If the machine OpenVAS-Server is running on does not have a certificate, you will have to generate one yourself.
The easiest way to do this is through the openvas-mkcert
script provided by the OpenVAS-Server package. This will generate two
certificates: one certificate for a local certificate authority (CA) and a
second certificate for the OpenVAS server which is signed by the CA and is
presented to connecting clients.
However, in case you want or have to consider a X.509 Public Key Infrastructure (PKI), you may of course use a certificate signed by the respective CA, which is e.g. done by your trust center.
| | | Generating a Server Certificate |