GVM versions
gsa: Greenbone Security Assistant 20.08+alpha~git
gvm: Greenbone Vulnerability Manager 21.04+alpha
openvas-scanner: OpenVAS 21.4+beta1
gvm-libs: gvm-libs 21.4+beta1
Environment
Operating system: Debian 10.4
Kernel: Linux scannerM01 4.19.0-9-amd64 #1 SMP Debian 4.19.118-2 (2020-04-29) x86_64 GNU/Linux
Installation method / source: latest from repo, compiled and installed over previous versions. db migrated.
When I try to login into gsad I get failure with the mentioned message. Guessed the server is returning an error to the browser instead of the JSON.
Launched it with:
/opt/gvmb/sbin/gsad --listen 0.0.0.0 --port 8080 --http-only --drop-privileges=gvm --munix-socket=/opt/gvm/var/run/gvmd.sock
stracing it I got:
[pid 23083] recvfrom(6, âPOST /selene/graphql/ HTTP/1.1\r\nHost: 195.22.17.13:8080\r\nConnection: keep-alive\r\nContent-Length: 281\r\naccept: /\r\nDNT: 1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36\r\ncontent-type: application/json\r\nOrigin: http://195.22.17.13:8080\r\nReferer: http://195.22.17.13:8080/login\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en,en-GB;q=0.9,en-US;q=0.8,pt-PT;q=0.7,pt;q=0.6,es;q=0.5,fr;q=0.4\r\nCookie: GSAD_SID=4d34cf27-8cf0-40e7-a75d-a52e05dab2b3\r\n\r\n{âoperationNameâ:âloginâ,âvariablesâ:{âusernameâ:âadminâ,âpasswordâ:â*********"},âqueryâ:âmutation login($username: String!, $password: String!) {\n login(username: $username, password: $password) {\n ok\n locale\n sessionTimeout\n timezone\n __typename\n }\n}\nâ}", 16384, 0, NULL, NULL) = 812
[pid 23083] setsockopt(6, SOL_TCP, TCP_NODELAY, [0], 4) = 0
[pid 23083] setsockopt(6, SOL_TCP, TCP_CORK, [1], 4) = 0
[pid 23083] sendto(6, âHTTP/1.1 406 Not Acceptable\r\nConnection: close\r\nContent-Length: 38\r\nContent-Security-Policy: default-src âselfâ âunsafe-inlineâ; img-src âselfâ blob:; frame-ancestors âselfâ\r\nX-Frame-Options: SAMEORIGIN\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store\r\nExpires: -1\r\nContent-Type: text/html; charset=utf-8\r\nDate: Tue, 28 Jul 2020 14:00:47 GMT\r\n\r\nâ, 349, MSG_NOSIGNAL, NULL, 0) = 349
So, the server isnât liking something. Any ideas?
Before I upgraded my 7.0/11.0/9.0 installation I updated everything before gsad and it connected to gvmd without problems.