<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Nothing has been change from our side in quite awhile.
<div class=""><br class="">
</div>
<div class=""><span style="font-size: 12px; font-family: 'Lucida Grande';" class="">--</span><br class="">
<span style="font-size: 12px; font-family: 'Lucida Grande';" class=""><b class="">Joel Esler</b></span><br class="">
<span style="font-size: 12px; font-family: 'Lucida Grande';" class="">Open Source Manager</span><br class="">
<span style="font-size: 12px; font-family: 'Lucida Grande';" class="">Threat Intelligence Team Lead</span><br class="">
<span style="font-size: 12px; font-family: 'Lucida Grande';" class="">Talos</span></div>
<div class=""><font face="Lucida Grande" class=""><span style="font-size: 12px;" class=""><br class="">
</span></font>
<div>
<blockquote type="cite" class="">
<div class="">On Feb 18, 2015, at 11:12 AM, Shirkdog <<a href="mailto:shirkdog@...11827..." class="">shirkdog@...11827...</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">In 0.7.1 an option to ignore the certificate check "-w" was added.<br class="">
<br class="">
Try that, but normally this is an issue on the back end.<br class="">
<br class="">
---<br class="">
Michael Shirk<br class="">
<br class="">
<br class="">
On Wed, Feb 18, 2015 at 8:33 AM, Lawrence Decker <<a href="mailto:lld0227@...11827..." class="">lld0227@...11827...</a>> wrote:<br class="">
<blockquote type="cite" class="">I'm running fedora core 20, I've updated my ca-certs, tried installing the<br class="">
cert from amazonaws, but I still get<br class="">
<br class="">
"500 Can't connect to <a href="http://s3.amazonaws.com" class="">s3.amazonaws.com</a>:443 (certificate verify failed) (1s)"<br class="">
<br class="">
If I take the link, I can plug it into my browser and it saves the snapshot,<br class="">
but running pulledpork, it keeps erroring out...  I've changed my distro<br class="">
from FC-20 -> FC-19 -> FC-14, no difference<br class="">
<br class="">
Any suggestions???<br class="">
<br class="">
Lawrence<br class="">
<br class="">
<br class="">
<br class="">
frwg01:~># yum install ca-certificates<br class="">
Loaded plugins: langpacks, refresh-packagekit<br class="">
Package ca-certificates-2014.2.2-1.0.<br class="">
fc20.noarch already installed and latest version<br class="">
Nothing to do<br class="">
<br class="">
<br class="">
<br class="">
frwg01:~># /usr/scripts/pulledpork/pulledpork.pl -vv -c<br class="">
/etc/snort/pulledpork.conf -T -l<br class="">
<br class="">
   <a href="http://code.google.com/p/pulledpork/" class="">http://code.google.com/p/pulledpork/</a><br class="">
     _____ ____<br class="">
    `----,\    )<br class="">
     `--==\\  /    PulledPork v0.7.1 - Swine Flu with a side of Ebola!<br class="">
      `--==\\/<br class="">
    .-~~~~-.Y|\\_  Copyright (C) 2009-2014 JJ Cummings<br class="">
 @_/        /  66\_  <a href="mailto:cummingsj@...11827..." class="">cummingsj@...11827...</a><br class="">
   |    \   \   _(")<br class="">
    \   /-| ||'--'  Rules give me wings!<br class="">
     \_\  \_\\<br class="">
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br class="">
<br class="">
Config File Variable Debug /etc/snort/pulledpork.conf<br class="">
   rule_path = /etc/snort/rules<br class="">
   sorule_path = /usr/local/lib/snort_dynamicrules/<br class="">
   version = 0.7.1<br class="">
   rule_url = ARRAY(0x2675e50)<br class="">
   ignore = deleted.rules,experimental.rules,local.rules<br class="">
   config_path = /etc/snort/snort.conf<br class="">
   sid_msg_version = 1<br class="">
   dropsid = /etc/snort/dropsid.conf<br class="">
   sid_msg = /etc/snort/sid-msg.map<br class="">
   snort_path = /usr/sbin/snort<br class="">
   temp_path = /tmp<br class="">
   distro = FC-14<br class="">
   snort_control = /usr/sbin/snort_control<br class="">
   disablesid = /etc/snort/disablesid.conf<br class="">
   sid_changelog = /var/log/sid_changes.log<br class="">
   local_rules = /etc/snort/rules/rules/local.rules<br class="">
   modifysid = /etc/snort/modifysid.conf<br class="">
   enablesid = /etc/snort/enablesid.conf<br class="">
   black_list = /etc/snort/rules/black_list.rules<br class="">
MISC (CLI and Autovar) Variable Debug:<br class="">
   arch Def is: x86-64<br class="">
   Config Path is: /etc/snort/pulledpork.conf<br class="">
   Distro Def is: FC-14<br class="">
   Disabled policy specified<br class="">
   local.rules path is: /etc/snort/rules/rules/local.rules<br class="">
   Rules file is: /etc/snort/rules<br class="">
   Path to disablesid file: /etc/snort/disablesid.conf<br class="">
   Path to dropsid file: /etc/snort/dropsid.conf<br class="">
   Path to enablesid file: /etc/snort/enablesid.conf<br class="">
   Path to modifysid file: /etc/snort/modifysid.conf<br class="">
   sid changes will be logged to: /var/log/sid_changes.log<br class="">
   sid-msg.map Output Path is: /etc/snort/sid-msg.map<br class="">
   Snort Version is: 2.9.7.0<br class="">
   Snort Config File: /etc/snort/snort.conf<br class="">
   Snort Path is: /usr/sbin/snort<br class="">
   Logging Flag is Set<br class="">
   Text Rules only Flag is Set<br class="">
   Extra Verbose Flag is Set<br class="">
   Verbose Flag is Set<br class="">
   Base URL is:<br class="">
<a href="https://www.snort.org/reg-rules/|snortrules-snapshot.tar.gz|<oinkcode>" class="">https://www.snort.org/reg-rules/|snortrules-snapshot.tar.gz|<oinkcode></a><br class="">
http://labs.snort.org/feeds/ip-filter.blf|IPBLACKLIST|open<br class="">
Checking latest MD5 for snortrules-snapshot-2970.tar.gz....<br class="">
   Fetching md5sum for: snortrules-snapshot-2970.tar.gz.md5<br class="">
** GET<br class="">
https://www.snort.org/reg-rules/snortrules-snapshot-2970.tar.gz.md5/<oinkcode><br class="">
==> 200 OK (1s)<br class="">
   most recent rules file digest: b1583e298e07ace6460dd985d94729f0<br class="">
Rules tarball download of snortrules-snapshot-2970.tar.gz....<br class="">
   Fetching rules file: snortrules-snapshot-2970.tar.gz<br class="">
** GET<br class="">
https://www.snort.org/reg-rules/snortrules-snapshot-2970.tar.gz/<oinkcode><br class="">
==> 302 Found<br class="">
** GET<br class="">
https://s3.amazonaws.com/snort-org-site/production/release_files/files/000/001/327/original/snortrules-snapshot-2970.tar.gz?AWSAccessKeyId=<TRIMMED>&Expires=1424221083&Signature=<TRIMMED><br class="">
==> 500 Can't connect to s3.amazonaws.com:443 (certificate verify failed)<br class="">
   A 500 error occurred, please verify that you have recently updated your<br class="">
root certificates!<br class="">
<br class="">
Message from syslogd@...17101... at Feb 17 18:56:36 ...<br class="">
pulledpork[2232]:FATAL: 500 error occured<br class="">
<br class="">
------------------------------------------------------------------------------<br class="">
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server<br class="">
from Actuate! Instantly Supercharge Your Business Reports and Dashboards<br class="">
with Interactivity, Sharing, Native Excel Exports, App Integration & more<br class="">
Get technology previously reserved for billion-dollar corporations, FREE<br class="">
http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk<br class="">
_______________________________________________<br class="">
Snort-users mailing list<br class="">
Snort-users@lists.sourceforge.net<br class="">
Go to this URL to change user options or unsubscribe:<br class="">
https://lists.sourceforge.net/lists/listinfo/snort-users<br class="">
Snort-users list archive:<br class="">
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users<br class="">
<br class="">
Please visit http://blog.snort.org to stay current on all the latest Snort<br class="">
news!<br class="">
</blockquote>
<br class="">
------------------------------------------------------------------------------<br class="">
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server<br class="">
from Actuate! Instantly Supercharge Your Business Reports and Dashboards<br class="">
with Interactivity, Sharing, Native Excel Exports, App Integration & more<br class="">
Get technology previously reserved for billion-dollar corporations, FREE<br class="">
<a href="http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk" class="">http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk</a><br class="">
_______________________________________________<br class="">
Snort-users mailing list<br class="">
Snort-users@lists.sourceforge.net<br class="">
Go to this URL to change user options or unsubscribe:<br class="">
https://lists.sourceforge.net/lists/listinfo/snort-users<br class="">
Snort-users list archive:<br class="">
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users<br class="">
<br class="">
Please visit http://blog.snort.org to stay current on all the latest Snort news!<br class="">
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>