Managing NVT signatures

Managing NVT signatures

(by Jan-Oliver Wagner)

This section explains what you need to do to allow your OpenVAS-Server to execute only signed NVTs with a trust level you decide.

Currently, some signed NVTs are available by using the command openvas-nvt-sync which is included in openvas-plugins. The signatures correspond to the certificate "OpenVAS Transfer Integrity" available on the OpenVAS website at

http://www.openvas.org/trusted-nvts.html
.

• What is a Signature?
• The Signature Format
• The Signature Verification Process
• How to Add a Certificate
• How to Set Trust
• How to Remove a Certificate
• Manual Signature Verification

---

Managing NVT signatures