Dependency problem with the w3af package

[brianclark]

Hello,

I am trying to install the w3af package from the atomic repository (using yum install), and I get the below dependency problem. Any ideas on how to fix this?

Code: Select all

w3af-1.0-0.1.rc4.el5.art.x86_64 from atomic has depsolving problems
  --> Missing Dependency: python-SocksiPy is needed by package w3af-1.0-0.1.rc4.el5.art.x86_64 (atomic)
Error: Missing Dependency: python-SocksiPy is needed by package w3af-1.0-0.1.rc4.el5.art.x86_64 (atomic)

I am running CentOS 5.5 x64 version.

Thanks,
Brian

[BruceLee]

what's the output from:

Code: Select all

yum search python-SocksiPy

[brianclark]

The output is:

Code: Select all

Warning: No matches found for: python-SocksiPy

Also, when running yum install python-SocksiPy, I get this:

Code: Select all

No package python-SocksiPy available.

[scott]

Added, should be in the repo today.

[brianclark]

I confirm that the python-SocksiPy package is now in the repo, and that yum install w3af now works!

Thanks for your assistance,
Brian

[scott]

Hey terrific, if you get a chance to play around with openvas let me know. That needs a lot of work still

[brianclark]

Well, I spoke too soon. I was able to get the packages to install, but I can't run w3af, either w3af_console or w3af_gui. Here is the error output that I get when running w3af_console

Code: Select all

[root@openvas ~]# w3af_console
Traceback (most recent call last):
  File "/usr/bin/w3af_console", line 91, in ?
    errCode = main()
  File "/usr/bin/w3af_console", line 67, in main
    from core.ui.consoleUi.consoleUi import consoleUi
  File "/usr/share/w3af/core/ui/consoleUi/consoleUi.py", line 28, in ?
    from core.ui.consoleUi.rootMenu import *
  File "/usr/share/w3af/core/ui/consoleUi/rootMenu.py", line 23, in ?
    from core.ui.consoleUi.menu import *
  File "/usr/share/w3af/core/ui/consoleUi/menu.py", line 25, in ?
    import core.data.kb.knowledgeBase as kb
  File "/usr/share/w3af/core/data/kb/knowledgeBase.py", line 54
    with self._kb_lock:
            ^
SyntaxError: invalid syntax

When I run w3af_gui (via the Gnome-based desktop in CentOS 5.5) I also get a SyntaxError, but is flagged on "import dependencyCheck"

I believe the problem might be that w3af requires Python 2.5, and CentOS 5.5 comes with Python 2.4.3. Do you have this working on a CentOS 5.5 box? Do you have Python 2.5 installed on it?

If this is the case, I guess you would need to add a dependency check to the w3af rpm to check for Python 2.5. Also, maybe you could package 2.5 for the Atomic repository.

Thanks,
Brian

[brianclark]

Regarding OpenVAS, I am using it now in production. It works pretty well. I use it in combination with GSA (greenbone security assistant). There are quite a few holes in its functionality, but what is there seems to work well.

Brian

[scott]

Right now Im doing all my w3af/openvas testing & development under Fedora 14. Once Ive got a feel that I can reliably predict the functionality, CentOS/RHEL is up. You're in a much better spot to identify the problems with el5 (and 6 maybe?) right now.

And hell no. Im never touching python If you break that you might as well re-image the box

[scott]

Ok so I reconsidered, and touched python. Its not done yet, but Im creating an interpreter called /usr/bin/python25 that will live in parallel with the native one and not hurt it. I think this means I have to make a million support packages for it to work (not sure yet), in which case I'm going to need help.

[brianclark]

Maybe you've seen these too, but before you go to too much effort, it seems that there are folks who have already done this work, for both Python 2.5 and 2.6.

http://www.geekymedia.com/tech-articles ... 2-62-rpms/

https://bugzilla.redhat.com/show_bug.cgi?id=573151

[scott]

semi-sorta-kinda. I looked at that the other day, there are a boatload of support packages that have to be built for it. The full set (of which I have not mapped out specific dependencies yet) is nearly 800 packages

[brianclark]

Whoa. Maybe I should just bite the bullet and upgrade to CentOS 6.

[breun]

Except... CentOS 6 hasn't been released yet.

[scott]

Another followup here, I got a lot further down the chain. I'll probably have a complete parallel implementation of python 2.5 when this is done, and that brings me to a bigger question. Whats more valuable python 2.5, 2.6, or 2.7 for a centos environment?

w3af and integrating it with openvas on centos/rhel 5 is important enough that I'm willing to put in the hours to get it done.