Minemeld updated and now I am getting cert errors on some sites

[deanm]

After the minemeld update, feeds that I added myself (Zeus tracker, ransomwaretracker) now have a cert error.  I have attached the error message.

Mike

[lmori · Accepted solution]

Hi @deanm,

please could you try issuing the following command:

$ sudo -u minemeld mm-cabundle-update

This will recreate the CA bundle used to authenticate the remote websites.

Could you attach the file /var/log/minemeld-auto-update.log from the instance ?

Thanks,

luigi

[deanm]

This is what I get when I run that command:

017-05-08T07:04:14 (13103)cacert_merge.main INFO: config: {'cafile': ['/opt/minemeld/local/certs/site/'], 'dst': '/opt/minemeld/local/certs/bundle.crt', 'config': '/opt/minemeld/local/certs/cacert-merge-config.yml', 'no_merge_certifi': False}

WARNING: old python version (< 2.7.9) - certificate verification not performed

I did try manually running the auto update once as well.

I had to add the .xml extension to the log file in order for the post to be accepted.

[lmori]

Hi @deanm,

could you verify that know you have a file named /opt/minemeld/local/certs/bundle.crt ? If you restart the engine and poll again, does the error disappear ?

Thanks,

luigi

[deanm]

Sorry, the output looked like an error so I did not check.

I do have the file and an engine restart shows the issue resolved.

Thanks again!