Re: Bump..any news on amazoneaws.com?

[JJC <cummingsj () gmail com>]

You need to install the root certs.... I suggest http://connie.slackware.com/~rworkman/ca-certificates/ or find 
something on slackbuilds.org etc...

Sent from my iPad

On Jul 7, 2010, at 8:22 PM, James Lay <jlay () slave-tothe-box net> wrote:

> Thanks Joel,
>
> Upgraded to the latest and greatest Crypt::SSLeay and LWP::Simple, but still the same results.  This is running on 
> Slackware, which I’ve discovered has an empty /etc/ssl/certs dir.  I’m guessing I may need the ca-cert from 
> amazonews.com?
>
> James
>
>
> From: Joel Esler <jesler () sourcefire com>
> Date: Wed, 7 Jul 2010 22:05:42 -0400
> To: James Lay <jlay () slave-tothe-box net>
> Cc: Snort <snort-users () lists sourceforge net>
> Subject: Re: [Snort-users] Bump..any news on amazoneaws.com?
>
> We moved the Snort rule repositories to Amazon's cloud service, instead of our own servers.  Reducing the load.
>
> That's why the change.  
>
>
> On Jul 7, 2010, at 9:58 PM, James Lay wrote:
>
> Joel,
>
> Thanks for the quick reply.  I have 4 machines and all are having the same issue.  Things have been working fine for 
> about 2 years when suddenly the below started.  I guess a question is why the sudden switch to https?  And where does 
> one look in the future for things like this that may have an impact on how snort functions?  I’m still installing 
> dependencies via CPAN, so I’ll post my results.  Thank you.
>
> James
>
>
> From: Joel Esler <jesler () sourcefire com <x-msg://562/jesler () sourcefire com> >
> Date: Wed, 7 Jul 2010 08:42:39 -0400
> To: James Lay <jlay () slave-tothe-box net <x-msg://562/jlay () slave-tothe-box net> >
> Cc: Snort <snort-users () lists sourceforge net <x-msg://562/snort-users () lists sourceforge net> >
> Subject: Re: [Snort-users] Bump..any news on amazoneaws.com <http://amazoneaws.com> ?
>
> This was posted several days ago on the list:
>
> http://global-security.blogspot.com/2010/07/pulledpork-042-501-error-when.html
>
>
> On Jul 7, 2010, at 8:17 AM, James Lay wrote:
>
> Still seeing these:
>
> Resolving s3.amazonaws.com <http://s3.amazonaws.com>  <http://s3.amazonaws.com <http://s3.amazonaws.com/> > ... 
> 207.171.185.129
> Connecting to s3.amazonaws.com|207.171.185.129|:443... connected.
> ERROR: Certificate verification error for s3.amazonaws.com <http://s3.amazonaws.com>  <http://s3.amazonaws.com 
> <http://s3.amazonaws.com/> > : unable to get local issuer certificate
> To connect to s3.amazonaws.com <http://s3.amazonaws.com>  <http://s3.amazonaws.com <http://s3.amazonaws.com/> >  
> insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection
>
> Any word on when this will be fixed?  Been about a week now I think.
>
> James 
> ------------------------------------------------------------------------------
> This SF.net <http://SF.net>  <http://SF.net <http://SF.net/> >  email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first <http://sprint.com/first>  <http://sprint.com/first>  -- 
> http://p.sf.net/sfu/sprint-com-first_______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net <x-msg://562/Snort-users () lists sourceforge net> 
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> ------------------------------------------------------------------------------
> This SF.net <http://SF.net>  email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first <http://sprint.com/first>  -- http://p.sf.net/sfu/sprint-com-first
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net <x-msg://562/Snort-users () lists sourceforge net> 
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> ------------------------------------------------------------------------------
> This SF.net <http://SF.net>  email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first <http://sprint.com/first>  -- 
> http://p.sf.net/sfu/sprint-com-first_______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Sprint
> What will you do first with EVO, the first 4G phone?
> Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users