Snort mailing list archives

Re: SSL problems with snort.org and pulledpork on FreeBSD


From: Shirkdog <shirkdog () gmail com>
Date: Thu, 22 Jan 2015 12:36:13 -0500

Yes, I added it just in case you need to troubleshoot issues with
pulledpork pulling down signature files.
On Jan 22, 2015 12:01 PM, "Tony Robinson" <deusexmachina667 () gmail com>
wrote:

I wanted to avoid disabling the cert check, but seeing as how I had to do
that already with wget and/or fetch, may be unavoidable. If you or anyone
else knows how to fix this, I'm all ears, otherwise, thanks. didn't realize
-w was an option.

On Wed, Jan 21, 2015 at 9:49 PM, Shirkdog <shirkdog () gmail com> wrote:

Have you tried the latest build from Google code?

Try -w to disable the certificate check.
 On Jan 21, 2015 9:12 PM, "Tony Robinson" <deusexmachina667 () gmail com>
wrote:

Hello,

Do any of you have experience running pulledpork on freebsd? Having
problems getting pulledpork to verify the certificate when it attempts to
download data from snort.org or the AWS cloud.

Here is what I have done so far:
- installed ca_root_nss
- symlinked /usr/local/share/certs/ca-root-nss.crt to /etc/ssl/cert.pem
(as many places recommend)

I've also noticed that freebsd fails to fetch or wget to
https://www.snort.org without the option to not check certificates
(--no-check-certificate for wget or fetch equivalent) is there another cert
bundle I need in order to make this work?

Thanks

--
when does reality end? when does fantasy begin?


------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!




--
when does reality end? when does fantasy begin?

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: