net-analyzer/greenbone-security-assistant: revbump to 7.0.3-r1.
authorHasan ÇALIŞIR <hasan.calisir@psauxit.com>
Tue, 19 Mar 2019 13:10:04 +0000 (16:10 +0300)
committerPatrice Clement <monsieurp@gentoo.org>
Fri, 22 Mar 2019 23:59:19 +0000 (00:59 +0100)
Introduces the new daemon arg for systemd & init.d.
This fixes the reverse proxy error comes with openvas WebUI(GSA).

Signed-off-by: Hasan ÇALIŞIR <hasan.calisir@psauxit.com>
Package-Manager: Portage-2.3.62, Repoman-2.3.11
Closes: https://github.com/gentoo/gentoo/pull/11410
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
net-analyzer/greenbone-security-assistant/files/gsa-daemon.conf
net-analyzer/greenbone-security-assistant/files/gsa.init
net-analyzer/greenbone-security-assistant/files/gsa.service
net-analyzer/greenbone-security-assistant/greenbone-security-assistant-7.0.3-r1.ebuild [moved from net-analyzer/greenbone-security-assistant/greenbone-security-assistant-7.0.3.ebuild with 100% similarity]

index 9d34da62659c93e1aed76c4f064b5bf37b6114ab..2c9a62eef8117c4348324d683ecf8ab20f5433f2 100644 (file)
@@ -18,3 +18,14 @@ OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT="--mport=9390"
 
 # TLS Settings
 OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES="--gnutls-priorities=NORMAL"
+
+# If you use reverse proxy you must set OPENVAS_REVERSE_PROXY daemon arg
+# otherwise you will get the below error.
+# --------------------------------------------------------------- 
+# The request contained an unknown or invalid Host header. 
+# If you are trying to access GSA via its hostname or a proxy, 
+# make sure GSA is set up to allow it.
+# ---------------------------------------------------------------
+
+# Reverse Proxy Settings ( e.g. --allow-header-host=subdomain.example.com )
+OPENVAS_REVERSE_PROXY="--allow-header-host="
index 6e625a96a25c492d9661336589e6999e07b68644..2b46364224220d82ee442644069f259f0e538489 100644 (file)
@@ -4,7 +4,7 @@
 
 name="Greenbone Security Assistant Daemon"
 command="/usr/sbin/gsad"
-command_args="${OPENVAS_SECURITY_ASSISTANT_OPTIONS} ${OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS} ${OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT} ${OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS} ${OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT} ${OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES}"
+command_args="${OPENVAS_SECURITY_ASSISTANT_OPTIONS} ${OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS} ${OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT} ${OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS} ${OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT} ${OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES} ${OPENVAS_REVERSE_PROXY}"
 pidfile="/var/run/gsad.pid"
 command_background="true"
 
index 3d0f2d37a45ed1738f69457fbd989a9402e88174..bc8c1d9e285ca5f62318e7c404aa239354a02f95 100644 (file)
@@ -8,7 +8,7 @@ Wants=gvmd.service
 [Service]
 Type=forking
 EnvironmentFile=-/etc/openvas/sysconfig/gsa-daemon.conf
-ExecStart=/usr/sbin/gsad $OPENVAS_SECURITY_ASSISTANT_OPTIONS $OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS $OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT $OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS $OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT $OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES
+ExecStart=/usr/sbin/gsad $OPENVAS_SECURITY_ASSISTANT_OPTIONS $OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS $OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT $OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS $OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT $OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES $OPENVAS_REVERSE_PROXY
 ExecReload=/bin/kill -HUP $MAINPID
 KillMode=mixed
 User=root