nessus-check-signature1
A simple utility to check (or generate) the signature of plugins retrieved from www.nessus.org
Usage
nessus-check-signature [-S]
filename
[signaturefile]
Overview
nessus-check-signature is a simple utility used by nessus-update-plugins to check the signatures of the Nessus plugins downloaded from www.nessus.org. When executed and provided both an archive and a signaturefile it will verify if the file matches the signature and if the signature matches the nessus_org.pem certificate.
It can also generate the signatures for the plugins distributed by www.nessus.org but you will, obviously, need the private certificate file to do so. You can, however, customise the code to use an alternate certificate file and generate plugins distributions files for third party servers.
Options
-
-S -
Sign the archive instead of checking the signature.
nessus-check-signaturewill check for the private certificate keynessus_org.priv.pemand will generate a.sigfile with the file signature.
Examples
To check the signature for all the plugins downloaded from the Nessus servers use:
nessus-check-signature all-2.0.tar.gz all-2.0.sig
Exit status
nessus-check-signature will return with a 0 value if the signature matches and will return with an error value (1) if the signature does not match or if any other error is found.
More information about the nessus project
The canonical place where you will find more information about the Nessus project is :
http://www.nessus.org/ ⟨⟩
Releases
Unchanged in 3 releases since Debian 3.1 (Sarge).