Enhancement #3412

Frequent download errors for snort sigs

Added by Filippo Carletti over 3 years ago. Updated almost 3 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-pulledpork
Target version:v6.8
Resolution:UPSTREAM NEEDINFO:No

Description

Sometimes, snort signatures download fails with the following error:

A 500 error occurred, please verify that you have recently updated your root certificates!

The error seems to be linked to the download location.

Workaround: fix the mirror to download from creating an host named snort.org with ip 104.16.62.75.

A fix suggested in the snort mailing list is to use the -w option of pulledpork to ignore certificate problems.

History

#1 Updated by Filippo Carletti over 3 years ago

  • Status changed from NEW to TRIAGED
  • Assignee set to Filippo Carletti
  • % Done changed from 0 to 20

I'd follow the suggestion to ignore certificate problems using the -w option.

#2 Updated by Filippo Carletti over 3 years ago

Filippo Carletti wrote:

I'd follow the suggestion to ignore certificate problems using the -w option.

The -w option doesn't fix the problem for me.
The option is documented as follows:

-w Skip the SSL verification (if there are issues pulling down rule files)

#3 Updated by Giacomo Sanchietti over 3 years ago

  • Assignee deleted (Filippo Carletti)

#4 Updated by Giacomo Sanchietti almost 3 years ago

  • Status changed from TRIAGED to CLOSED
  • % Done changed from 20 to 100
  • Resolution set to UPSTREAM

This is an upstream problem.
Reopen it if we can find a workable fix.

Also available in: Atom PDF