Custom Plugin Packages for NASL and CA Certificate Upload

Note: Tenable does not support troubleshooting custom plugin packages for NASL.

You can upload a custom plugin package as a .tar.gz or .tgz file. Depending on your needs, you must include a combination of the following files:

  • A custom_feed_info.inc file. Always include this file to time stamp your upload to Tenable Security Center.

  • (Optional) A custom_nasl_archive.tar.gz or custom_nasl_archive.tgz file. Include this file if you are uploading one or more custom plugins.

  • (Optional) A custom_CA.inc file. Include this file if you are uploading one or more CA certificates to solve a Tenable Nessus scanning issue.

After you Create the Custom Plugin Package and Upload the Custom Plugin Package, Tenable Security Center pushes the package to Tenable Nessus for use when scanning.

Note: The system untars the files within your custom plugin package and overwrites any identically named files already in Tenable Security Center or Tenable Nessus.

custom_feed_info.inc Guidelines

Always include this file to time stamp your upload to Tenable Security Center. This text file must contain the following lines:

PLUGIN_SET = "YYYYMMDDHHMM";

PLUGIN_FEED = "Custom";

The PLUGIN_SET variable YYYYMMDDHHMM is the date and time 2 minutes in the future from when you plan to upload the file to Tenable Security Center.

custom_nasl_archive.tar.gz or custom_nasl_archive.tgz Guidelines

Include this file if you are uploading one or more custom plugins. This package must contain one or more custom plugin NASL files.

All custom plugins must have unique Plugin ID numbers and have family associations based on existing Tenable Security Center families.

Note: Tenable Support does not assist with creating custom plugin NASL files.

custom_CA.inc Guidelines

Include this file if you are uploading one or more CA certificates to solve a Tenable Nessus scanning issue. This text file must contain PEM-encoded (Base64) CA certificate text.

For troubleshooting information, see Troubleshooting Issues with the custom_CA.inc File.

One CA Certificate

If you need to include a single CA certificate, paste the PEM-encoded (Base64) certificate directly into the file.

-----BEGIN CERTIFICATE-----

certificatetext

certificatetext

certificatetext

certificatetext

-----END CERTIFICATE-----

Multiple CA Certificates

If you need to include two or more CA certificates, include the PEM-encoded (Base64) certificates back-to-back.

-----BEGIN CERTIFICATE-----

certificate1text

certificate1text

certificate1text

certificate1text

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

certificate2text

certificate2text

certificate2text

certificate2text

-----END CERTIFICATE-----