topic Minemeld updated and now I am getting cert errors on some sites in General Topics

Minemeld updated and now I am getting cert errors on some sites

deanm — Mon, 08 May 2017 03:33:14 GMT

After the minemeld update, feeds that I added myself (Zeus tracker, ransomwaretracker) now have a cert error. I have attached the error message.

Mike

Re: Minemeld updated and now I am getting cert errors on some sites

lmori — Mon, 08 May 2017 05:05:36 GMT

Hi @deanm,

please could you try issuing the following command:

$ sudo -u minemeld mm-cabundle-update

This will recreate the CA bundle used to authenticate the remote websites.

Could you attach the file /var/log/minemeld-auto-update.log from the instance ?

Thanks,

luigi

Re: Minemeld updated and now I am getting cert errors on some sites

deanm — Mon, 08 May 2017 14:08:55 GMT

This is what I get when I run that command:

017-05-08T07:04:14 (13103)cacert_merge.main INFO: config: {'cafile': ['/opt/minemeld/local/certs/site/'], 'dst': '/opt/minemeld/local/certs/bundle.crt', 'config': '/opt/minemeld/local/certs/cacert-merge-config.yml', 'no_merge_certifi': False}

WARNING: old python version (< 2.7.9) - certificate verification not performed

I did try manually running the auto update once as well.

I had to add the .xml extension to the log file in order for the post to be accepted.

Re: Minemeld updated and now I am getting cert errors on some sites

lmori — Mon, 08 May 2017 14:21:33 GMT

Hi @deanm,

could you verify that know you have a file named /opt/minemeld/local/certs/bundle.crt ? If you restart the engine and poll again, does the error disappear ?

Thanks,

luigi

Re: Minemeld updated and now I am getting cert errors on some sites

deanm — Mon, 08 May 2017 14:29:06 GMT

Sorry, the output looked like an error so I did not check.

I do have the file and an engine restart shows the issue resolved.

Thanks again!