search

PaloAltoNetworks / minemeld-core

Engine of MineMeld
Apache License 2.0
141 stars 95 forks source link

FS-ISAC change requires libtaxii version increase #371

Open Justbkuz opened 4 years ago

Justbkuz commented 4 years ago

Is your feature request related to a problem?

FS-ISAC changed it feed urls on may 30th, this started to cause the following error, ERROR: Exception in polling loop for FSISAC: <urlopen error [SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:726)>

Describe the solution you'd like

This appears to have been fixed by increase the venv versions of libtaxii==1.1.117 requests==2.24.0 six==1.13.0

Additional context

After upgrading those 3 pip packages fs-isac was able to connect to the new urls they have created

Steps followed: Set libtaxii==1.1.117 requests==2.24.0 six==1.13.0 in: /opt/minemeld/engine/core/minemeld_core.egg-info/requires.txt /opt/minemeld/engine/core/requirements.txt /opt/minemeld/local/library/constraints.txt

Update the package: cd /opt/minemeld/engine/current/local source bin/activate pip install --upgrade libtaxii==1.1.117 requests==2.24.0 six==1.13.0

welcome[bot] commented 4 years ago

:tada: Thanks for opening your first issue here! Welcome to the community!

jtschichold commented 4 years ago

@Justbkuz I have just pushed an improvement on the minemeld-taxii-ng extension and I tested compatibility with FS-ISAC. Just install version 0.2a3. https://github.com/PaloAltoNetworks/minemeld-taxii-ng

I will keep this open, I will upgrade the STIX and TAXII libraries after some testing. minemeld-taxii-ng does not use the official libs and it is a bit less opinionated.