[Snort-users] SSL problems with snort.org and pulledpork on FreeBSD

Shirkdog shirkdog at ...11827...
Thu Jan 22 12:36:13 EST 2015


Yes, I added it just in case you need to troubleshoot issues with
pulledpork pulling down signature files.
On Jan 22, 2015 12:01 PM, "Tony Robinson" <deusexmachina667 at ...11827...>
wrote:

> I wanted to avoid disabling the cert check, but seeing as how I had to do
> that already with wget and/or fetch, may be unavoidable. If you or anyone
> else knows how to fix this, I'm all ears, otherwise, thanks. didn't realize
> -w was an option.
>
> On Wed, Jan 21, 2015 at 9:49 PM, Shirkdog <shirkdog at ...11827...> wrote:
>
>> Have you tried the latest build from Google code?
>>
>> Try -w to disable the certificate check.
>>  On Jan 21, 2015 9:12 PM, "Tony Robinson" <deusexmachina667 at ...11827...>
>> wrote:
>>
>>> Hello,
>>>
>>> Do any of you have experience running pulledpork on freebsd? Having
>>> problems getting pulledpork to verify the certificate when it attempts to
>>> download data from snort.org or the AWS cloud.
>>>
>>> Here is what I have done so far:
>>> - installed ca_root_nss
>>> - symlinked /usr/local/share/certs/ca-root-nss.crt to /etc/ssl/cert.pem
>>> (as many places recommend)
>>>
>>> I've also noticed that freebsd fails to fetch or wget to
>>> https://www.snort.org without the option to not check certificates
>>> (--no-check-certificate for wget or fetch equivalent) is there another cert
>>> bundle I need in order to make this work?
>>>
>>> Thanks
>>>
>>> --
>>> when does reality end? when does fantasy begin?
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
>>> GigeNET is offering a free month of service with a new server in Ashburn.
>>> Choose from 2 high performing configs, both with 100TB of bandwidth.
>>> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
>>> http://p.sf.net/sfu/gigenet
>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>
>
>
> --
> when does reality end? when does fantasy begin?
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150122/bc488b4e/attachment.html>


More information about the Snort-users mailing list