Connection Types

Before being able to talk to a remote GMP or OSP server using one of the provided command line clients, the user has to choose a connection type for establishing a communication channel. Currently three different connection types are supported for being used as transport protocol:

For the most common use case (querying openvasmd/gvmd via GMP at the same host) the socket connection should be chosen. The other connection types require some setup and possible adjustments at the server side, if you are not using a Greenbone OS based system.

Unix Domain Socket

The Unix Domain Socket is the default connection type of gvmd in the Greenbone Source Edition. It is only usable when running the client tool at the same host as the daemon.

The location and name of the Unix Domain Socket provided by gvmd/openvasmd highly depends on your environment and GVM installation. Also its name changed from openvasmd.sock in GVM 9 to gvmd.sock in GVM 10.

For example in GOS 4 the path is either /run/openvas/openvasmd.sock or /usr/share/openvas/gsa/classic/openvasmd.sock and for GOS 5 the path is either /run/gvm/gvmd.sock or /usr/share/gvm/gsad/web/gvmd.sock.

OSPd based scanners may be accessed via Unix Domain Sockets too. The location and name of these sockets is configurable and depends on the used OSPd scanner implementation.

Warning

Accessing a Unix Domain Socket requires sufficient unix file permissions for the user running the command line interface tool. Please do not start a tool as root user via sudo or su only to be able to access the socket path. Instead, please adjust the socket file permissions for example by setting the --listen-owner, --listen-group or --listen-mode arguments of gvmd.

TLS

The TLS connection type was the default connection type for remote and local communication in GOS 3.1 and before. It is used to secure the transport protocol connection of GMP or OSP. It requires to provide a TLS certificate file, TLS key file and TLS certificate authority file.

SSH

Since GOS 4 SSH is the default connection type for secure remote communication with the manager daemon via GMP. The Greenbone Management Protocol is tunneled through SSH and forwarded to gvmd/openvasmd.