SCAP/CERT feed not working for GVM10 on Ubuntu 16

bhumi · October 7, 2020, 4:00pm

Hello!

I am trying to rsync SCAP/CERT feed after fresh install of GVM on Ubuntu 16. However, it keeps trying to old URL (feed.openvas.org) even though I am using updated GVMD (v8.0.2 with new URL feed.community.greenbone.net).
Surprisingly “greenbone-nvt-sync” doesn’t have any issue. I tried “gvm-manage-certs -a -f” also which worked. But still getting this error:

Using the following versions:
gvm-libs/v10.0.2
openvas/v6.0.2
gvmd/v8.0.2
gsa/v8.0.2
ospd/v1.3.2
openvas-smb/v1.0.5

Lukas · October 7, 2020, 5:31pm

Please update your software, esp. the gvmd. As you noticed the old legacy feed server is turned off. Additional do not run any feed-sync as root as you do.

The scap and certdata sync is only a wrapper for the feed-snyc so you are calling the wrong script.

github.com

greenbone/gvmd/blob/main/tools/greenbone-scapdata-sync.in

#!/bin/sh
# Copyright (C) 2011-2022 Greenbone AG
#
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

# This script synchronizes a GVM installation with the
# feed data from either the Greenbone Security Feed (in

This file has been truncated. show original

github.com

greenbone/gvmd/blob/main/tools/greenbone-certdata-sync.in

#!/bin/sh
# Copyright (C) 2011-2022 Greenbone AG
#
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

# This script synchronizes a GVM installation with the
# feed data from either the Greenbone Security Feed (in

This file has been truncated. show original

cfi · October 8, 2020, 6:41am

A wild guess is:

You have two versions of greenbone-scapdata-sync and greenbone-certdata-sync installed on your system, one of them in older versions (e.g. from a previous installation) still using the deprecated feed.openvas.org. And the ones using the deprecated URLs probably have a higher priority in your PATH.

Note that greenbone-scapdata-sync and greenbone-certdata-sync are still the correct commands to call for GVM-10, these are only wrappers like previously mentioned starting from GVM-20.08.