I have PAN at the border but this traffic is not getting SSL inspection.
I am trying to get NH-ISAC soltra instance on https://members.nhisac.org/
Error i am seeing in the log file. I did upload the cert from "http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crl"
URLError: <urlopen error [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed> 2018-03-07T08:13:49 (7608)basepoller._polling_loop INFO: Polling nh-isac-soltra-feed 2018-03-07T08:13:49 (7608)basepoller._poll ERROR: Exception in polling loop for nh-isac-soltra-feed: <urlopen error [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed> Traceback (most recent call last): File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 721, in _poll performed = self._polling_loop() File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 571, in _polling_loop iterator = self._build_iterator(now) File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 1097, in _build_iterator self._discover_services(tc) File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 268, in _discover_services resp = self._call_taxii_service(self.discovery_service, tc, request) File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/ft/taxii.py", line 258, in _call_taxii_service port=port File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/libtaxii/clients.py", line 337, in call_taxii_service2 response = urllib.request.urlopen(req) File "/usr/lib/python2.7/urllib2.py", line 127, in urlopen return _opener.open(url, data, timeout) File "/usr/lib/python2.7/urllib2.py", line 404, in open response = self._open(req, data) File "/usr/lib/python2.7/urllib2.py", line 422, in _open '_open', req) File "/usr/lib/python2.7/urllib2.py", line 382, in _call_chain result = func(*args) File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/libtaxii/clients.py", line 363, in https_open return self.do_open(self.get_connection, req) File "/usr/lib/python2.7/urllib2.py", line 1184, in do_open raise URLError(err)
... View more