-ssh-external doesn't seem to work

[jody-frankowski]

-ssh-external doesn't seem to work for me (I changed the names in the example):

INFO[0000] cve-dictionary: /home/me/cve/cve.sqlite3
[Jun 24 14:33:13]  INFO [localhost] Validating Config...
[Jun 24 14:33:13]  INFO [localhost] Detecting Server OS...
[Jun 24 14:33:13]  INFO [localhost] (1/3) Failed AAA
[Jun 24 14:33:13]  INFO [localhost] (2/3) Failed BBB
[Jun 24 14:33:13]  INFO [localhost] (3/3) Failed CCC
[Jun 24 14:33:13] ERROR [localhost] Failed to init servers. Check the configuration. err: Failed to detect server OSes. err: [Error occurred on AAA. errs: [Unknown OS Type] Error occurred on BBB. errs: [Unknown OS Type] Error occurred on CCC. errs: [Unknown OS Type]]

Here is my config:

[servers]
[servers.AAA]
host = "AAA"

[servers.BBB]
host = "BBB"

[servers.CCC]
host = "CCC"

[kotakanbe]

Would you try with -debug option?

[jody-frankowski]

DEBU[0000] SSH executed. cmd: /usr/bin/ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=no -o ControlPath=none @AAA -p  set -o
pipefail; ls /etc/debian_version, err: <nil>, status: 255
stdout:

stderr:
usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
           [-D [bind_address:]port] [-E log_file] [-e escape_char]
           [-F configfile] [-I pkcs11] [-i identity_file] [-L address]
           [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
           [-Q query_option] [-R address] [-S ctl_path] [-W host:port]
           [-w local_tun[:remote_tun]] [user@]hostname [command]
[Jun 24 15:26:39] DEBUG [localhost] Not Debian like Linux. Host: AAA

[kotakanbe]

Status 255 means unable to connect by ssh.
http://stackoverflow.com/questions/14885748/ssh-script-returns-255-error

Probabry, the sshd or ssh client version is old. What is the version of ssh client and sshd.
I think unknown option error is occurred while ssh.
Please try the ssh command that is printed in debug log on terminal.

[kotakanbe]

https://github.com/future-architect/vuls/blob/master/scan/sshutil.go#L189

[kotakanbe]

I looked carefully at debug log.

DEBU[0000] SSH executed. cmd: /usr/bin/ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=no -o ControlPath=none @AAA -p  set -o

Actually, Vuls executed below command.

/usr/bin/ssh @aaa

Probably the config is wrong.
Please define port, user, keypath of private key in config.toml.

[servers]

[servers.172-31-4-82]
host         = "172.31.4.82"
port        = "22"
user        = "username"
#keyPath     = "/home/username/.ssh/id_rsa"

[kotakanbe]

I am going to add some validation to config.toml in the near future.

[kotakanbe]

Added some validation.
#113