PaloAltoNetworks / minemeld-ansible

Ansible playbook for installing MineMeld on Linux
Apache License 2.0
48 stars 48 forks source link

SSL taxii-discovery-service #38

Open TiagoSantos84 opened 6 years ago

TiagoSantos84 commented 6 years ago

Good afternoon,

This is not an issue. Just something that I really don't know.

I would like to know where to put the certificates on the minemeld server for nodes.

Example: Output Node from prototype: minemeld.ft.taxii.DataFeed Provide to a SIEM: https://minemeld_server/taxii-discovery-service and get success on SSL certificate verification.

At this moment minemeld_webserver have the correct certificate however I'm not able to have that result for the node.

I really don't want to use self signed certificate in the client. user@server:/etc/ssl/private# taxii-discovery --host minemeld.server.pt --path /taxii-discovery-service --https 2018-05-03 15:14:24,338 INFO: Sending Discovery_Request to https://minemeld.server.pt/taxii-discovery-service 2018-05-03 15:14:24,342 INFO: Starting new HTTPS connection (1): minemeld.server.pt 2018-05-03 15:14:24,356 ERROR: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)

Best Regards, Tiago Santos