**********

We are going to ask you some question for each client certificate

If some question has a default answer, you can force an empty answer by

entering a single dot '.'

*********

User #1 name (e.g. Nessus username): admin

Client certificates life time in days [365]:admin

Country (two letter code) [CN]: CN

State or province name [BJ]:

Location (e.g. town) [BJ]:

Organization [Test]:

Organization unit [Test]:

e-mail []: [email]admin@test.com[/email]

Generating RSA private key, 1024 bit long modulus

......................++++++

...................++++++

e is 65537 (0x10001)

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [FR]:State or Province Name (full name)

[Some-State]:Locality Name (eg, city) []:Organization Name (eg, company)

[Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common

Name (eg, your name or your server's hostname) []:Email Address []:Using

configuration from /tmp/nessus-mkcert.6217/stdC.cnf

Check that the request matches the signature

Signature ok

The Subject's Distinguished Name is as follows

countryName           :PRINTABLE:'CN'

stateOrProvinceName   :PRINTABLE:'BJ'

localityName          :PRINTABLE:'BJ'

organizationName      :PRINTABLE:'Test'

organizationalUnitName:PRINTABLE:'Test'

commonName            :PRINTABLE:'admin'

emailAddress          :IA5STRING:'[email]admin@test.com[/email]'

Certificate is to be certified until May 25 17:37:42 2008 GMT (365 days)


Write out database with 1 new entries

Data Base Updated


User rules

----------

nessusd has a rules system which allows you to restrict the hosts

that has the right to test. For instance, you may want

him to be able to scan his own host only.


Please see the nessus-adduser(8) man page for the rules syntax


Enter the rules for this user, and hit ctrl-D once you are done:

(the user can have an empty rules set)

User added to Nessus.

Another client certificate? n

Your client certificates are in /tmp/nessus-mkcert.6217                             ；证书在/tmp/nessus-mkcert.6217,要妥善保存

You will have to copy them by hand



7.将证书放到nessus的证书目录下

[root@test8 /]# cd /tmp/nessus-mkcert.6217/

[root@test8 nessus-mkcert.6217]# ls

01.pem                   index.txt      req_admin.pem stdC.cnf

cert_admin.pem           index.txt.old serial

cert_nessuswx_admin.pem key_admin.pem serial.old

[root@test8 nessus-mkcert.6217]# cp *.pem /opt/nessus/com/nessus/CA/


8安装并启用NessussClient

[root@test8 /]# mv NessusClient-1[1].0.2-es4.i386 NessusClient.rpm

[root@test8 /]# rpm -ivh NessusClient.rpm


[root@test8 /]#NessussClient