Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MISP Connection Error with Cortex/HIVE #371

Closed
SivaPrem opened this issue Nov 8, 2017 · 1 comment
Closed

MISP Connection Error with Cortex/HIVE #371

SivaPrem opened this issue Nov 8, 2017 · 1 comment

Comments

@SivaPrem
Copy link

SivaPrem commented Nov 8, 2017

Question Answer
OS version (server) Ubuntu, ...
, ...
TheHive version 2.13.1
Cortex Version : 1.1.4
MISP : 2.4.76 /2.4.81 (Two instances)

When I try to Check for IOC from The hive or Cortex in MISP , I have the following issue , It was mentioned there was some fix for this issue , But I have the following error thrown

Error From the HIVE

image

Error From the Cortex:

Error: Invalid output\n/usr/local/lib/python2.7/dist-packages/pymisp/api.py:20: UserWarning: You're using python 2, it is strongly recommended to use python >=3.4\n warnings.warn("You're using python 2, it is strongly recommended to use python >=3.4")\n/usr/local/lib/python2.7/dist-packages/pymisp/mispevent.py:45: UserWarning: You're using python 2, it is strongly recommended to use python >=3.4\n warnings.warn("You're using python 2, it is strongly recommended to use python >=3.4")\n/usr/local/lib/python2.7/dist-packages/pymisp/api.py:39: UserWarning: You're using python 2, it is strongly recommended to use python >=3.4\n warnings.warn("You're using python 2, it is strongly recommended to use python >=3.4")\nTraceback (most recent call last):\n File "./misp.py", line 67, in \n MISPAnalyzer().run()\n File "./misp.py", line 20, in init\n name=name)\n File "/home//analyzers/Cortex-Analyzers-master/analyzers/MISP/mispclient.py", line 40, in init\n ssl=verify))\n File "/usr/local/lib/python2.7/dist-packages/pymisp/api.py", line 118, in init\n raise PyMISPError('Unable to connect to MISP ({}). Please make sure the API key and the URL are correct (http/https is required): {}'.format(self.root_url, e))\npymisp.exceptions.PyMISPError: Unable to connect to MISP (https://XXXXX). Please make sure the API key and the URL are correct (http/https is required): [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)\n",

Conf USED in Cortex : (Application.conf)

MISP{
url=["https://XXXXX/"]
key=["XXXXXX"]
certpath=["/etc/apache2/ssl/"]
}

Hive Conf

misp {
"MISP_CASETEMPLATE" {
# URL of the MISP server
url = "https://XXXXXXXX"

# authentication key
key = "XXXXXXXX"

# tags that must be automatically added to the case corresponding to the imported event
tags = ["misp"]

# truststore configuration using "cert" key is deprecated
cert =" /etc/apache2/ssl/"

# HTTP client configuration, more details in section 8
# ws {
#   proxy {}
#   ssl {}
# }

}
}

misp : ( /etc/apache2/sites-available/misp-ssl.conf)

image

Can you Correct me on this please

@SivaPrem
Copy link
Author

SivaPrem commented Nov 9, 2017

Thanks team , From you help in the Gitter chat , I resolved the issue

@SivaPrem SivaPrem closed this as completed Nov 9, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant