IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  cafile=false not working

    Posted Tue April 28, 2020 08:07 AM
    Hi 

    I hope somebody can help me with this. It has been racking my brain. I trying to create my own custom functions in resilient. 

    When I use codegen to create my package, I get this error.

    requests.exceptions.SSLError: HTTPSConnectionPool(host='resilient', port=443): Max retries exceeded with url: /rest/session (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))

    So I went into the app.config and set cafile=false to remove SSL verification. And restart the service but still get the exact same error.

    I'm really confused. Have any of you had the same issues.

    ------------------------------
    Simeon Jaganyi
    ------------------------------


  • 2.  RE: cafile=false not working

    Posted Wed April 29, 2020 09:21 AM
    Edited by Elizabeth Hecht Wed April 29, 2020 09:40 AM
    Hi Simeon, you could be using the wrong directory, have another copy of the app.config locally, or failure to connect to the server. Check to see if you have the correct host for the appliance, try resilient.localhost or a IP address. In addition it could be a problem with an integration that is installed.

    ------------------------------
    Elizabeth Hecht
    ------------------------------

    Original Message


  • 3.  RE: cafile=false not working

    Posted Wed April 29, 2020 11:33 AM
    I have seen this happen in cases where the httplib class was being used for the HTTP requests.  Some people have had success using the requests package.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message