Frequent download errors for snort sigs
Sometimes, snort signatures download fails with the following error:
A 500 error occurred, please verify that you have recently updated your root certificates!
The error seems to be linked to the download location.
Workaround: fix the mirror to download from creating an host named snort.org with ip 220.127.116.11.
A fix suggested in the snort mailing list is to use the -w option of pulledpork to ignore certificate problems.
#2 Updated by Filippo Carletti over 4 years ago
Filippo Carletti wrote:
I'd follow the suggestion to ignore certificate problems using the -w option.
The -w option doesn't fix the problem for me.
The option is documented as follows:
-w Skip the SSL verification (if there are issues pulling down rule files)