Reply
Highlighted
L1 Bithead
Posts: 6
Registered: ‎09-26-2018

CERTIFICATE VERIFY FAILED

[ Edited ]

Hello, I created a custom taxii client node type using cabby.

But I get an ssl certificate error. I'm behind a proxy.

When I run a test py using cabby, everthing works fine. But the node shows error.

As you can see, I've set verify_ssl=False. Could anyone help me with this ??

 

Engine log:

(4510)basepoller._polling_loop INFO: Polling swiftClient


2018-12-05T00:01:14 (4510)taxiiClient._discover_services INFO: taxiiClient discovery_path=/taxii/discovery, verify_ssl=False

 

2018-12-05T00:01:14 (4510)dispatcher.obtain_jwt_token INFO: Obtaining JWT token from https://taxii.swift.com/api/auth
2018-12-05T00:01:14 (4510)connectionpool._new_conn DEBUG: Starting new HTTPS connection (1): taxii.swift.com:443
2018-12-05T00:01:15 (4510)basepoller._poll ERROR: Exception in polling loop for swiftClient: HTTPSConnectionPool(host='taxii.swift.com', port=443): Max retries exceeded with url: /api/auth (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))
Traceback (most recent call last):
File "/opt/minemeld/engine/core/minemeld/ft/basepoller.py", line 721, in _poll
performed = self._polling_loop()
File "/opt/minemeld/engine/core/minemeld/ft/basepoller.py", line 571, in _polling_loop
iterator = self._build_iterator(now)
File "/opt/minemeld/engine/core/minemeld/ft/taxiiClient.py", line 1198, in _build_iterator
self._discover_services(tc)
File "/opt/minemeld/engine/core/minemeld/ft/taxiiClient.py", line 324, in _discover_services
services = tc.discover_services()
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/abstract.py", line 292, in discover_services
response = self._discovery_request(uri)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/client11.py", line 27, in _discovery_request
response = self._execute_request(request, uri=uri)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/abstract.py", line 182, in _execute_request
self.refresh_jwt_token(session=session)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/abstract.py", line 139, in refresh_jwt_token
self.password)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/dispatcher.py", line 377, in obtain_jwt_token
session, jwt_url, request_body, timeout, headers)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/cabby/dispatcher.py", line 89, in request_stream
headers=headers)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/requests/sessions.py", line 572, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/requests/sessions.py", line 524, in request
resp = self.send(prep, **send_kwargs)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/requests/sessions.py", line 637, in send
r = adapter.send(request, **kwargs)
File "/opt/minemeld/engine/current/lib/python2.7/site-packages/requests/adapters.py", line 514, in send
raise SSLError(e, request=request)
SSLError: HTTPSConnectionPool(host='taxii.swift.com', port=443): Max retries exceeded with url: /api/auth (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))
2018-12-05T00:01:17 (4510)basepoller._poll DEBUG: swiftClient - End of polling - #indicators: 0
2018-12-05T00:01:17 (4510)basepoller._actor_loop INFO: swiftClient - command: 1543996870263 age_out
2018-12-05T00:01:17 (4510)table._query_by_index INFO: Deleted in scan of _age_out: 0
2018-12-05T00:01:17 (4510)basepoller._actor_loop INFO: swiftClient - command: 1543996870263 gc
2018-12-05T00:01:17 (4510)table._query_by_index INFO: Deleted in scan of _withdrawn: 0

 

 

L1 Bithead
Posts: 6
Registered: ‎09-26-2018

Re: CERTIFICATE VERIFY FAILED

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!