Master and slave architecture

Yes, you are using server certificates on the client (gvmd), and client certificates on the server ! (ospd.openvas)

You must do the other way around. Client certs on gvmd; server certs on ospd.openvas.