Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
The same type of approaches to working around that should work. On Fri, May 24, 2019 at 3:40 PM Pablo de Azevedo wrote: > Hi Nick! > Thanks so much the task "bro" worked perfectly! > But now in the TASK [snort : Build daq] can not find package > dq-2.0.6-1.src.rpm in snort page. > > https://snort.org/downloads/snort/daq-2.0.6-1.src.rpm > 2019-05-24 16:30:23 ERRO 404: Not Found. > > > *Best regards!* > Pablo de Azevedo > > > Em sex, 24 de mai de 2019 às 09:44, Nick Allen > escreveu: > >> Ah, yes, you are right. It sounds like an external change might have >> broken that installation path for the dev environment. >> >> In most cases, we don't install Bro in the dev environment any longer >> because it is just too much to run on a single VM. Keep that in mind for >> your demo. That being said, here are a couple things you could try to work >> around this. >> >> (1) Change the URL for the Bro download. You would need to make that >> change here >> <https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20>. >> Try http instead of https? If that doesn't work, try the proper Zeek URL >> <https://www.zeek.org/downloads/bro-2.6.1.tar.gz> [2] instead of the >> legacy Bro URL. >> >> (2) If that does not work, manually download that tarball and put it on >> your VM at /tmp/bro-2.5.5.tar.gz. If the tarball is already at that >> location, it should skip over the download step. >> >> Best of luck >> >> -- >> [1] >> https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20 >> [2] https://www.zeek.org/downloads/bro-2.5.5.tar.gz >> >> >> On Thu, May 23, 2019 at 8:46 PM Pablo de Azevedo < >> pablodeazev...@gmail.com> wrote: >> >>> Hi! >>> This python 2.6.6.. version refers to version installed in *node1*: >>> >>> *[vagrant@node1 ~]$ python* >>>> Python 2.6.6 (r266:84292, Aug 18 2016, 15:13:37) >>>> [GCC 4.4.7 20120313 (Red Hat 4.4.7-17)] on linux2 >>> >>> >>> In my host is default installation python package: >>> >>> *pablo@ub16042019:~$ python* >>>> Python 2.7.12 (default, Nov 12 2018, 14:36:49) >>>> [GCC 5.4.0 20160609] on linux2 >>> >>> >>> I reviewed all the packages on my host but still the error in the TASK >>> [bro : Download bro] continues in node1. >>> >>> *Best regards!* >>> Pablo de Azevedo >>> >>> >>> Em qua, 22 de mai de 2019 às 20:49, Nick Allen >>> escreveu: >>> >>>> You probably have multiple Python versions installed. Take a look at >>>> your error message again. More specifically... >>>> >>>> > ... (the python executable used (/usr/bin/python) is version: 2.6.6 >>>> (r266:84292, Aug 18 2016, 15:13:37) >>>> >>>> On Wed, May 22, 2019 at 7:17 PM Pablo de Azevedo < >>>> pablodeazev...@gmail.com> wrote: >>>> >>>>> Hi Simon! >>>>> Yes, my python version is *Python 2.7.12* and my certificates are up >>>>> to date, but the failed again in download bro task. >>>>> >>>>> *Best regards!* >>>>> Pablo de Azevedo >>>>> >>>>> >>>>> Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball < >>>>> si...@simonellistonball.com> escreveu: >>>>> >>>>>> Did you check the python versions and make sure your ca certificates >>>>>> were up-to-date as per the error message? >>>>>> >>>>>> Simon >>>>>> >>>>>> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo < >>>>>> pablodeazev...@gmail.com> wrote: >>>>>> >>>>>>> Hello everybody! >>>>>>> I'm trying install apache with full sensors activated for >>>>>>> demonstration, but I have problems in TASK [bro : Download bro]. What's >>>>>>> happened? >>>>>>> Evidences: >>>>>>> >>>>>>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ >>>>>>>> vagrant --ansible-skip-tags="sensor-stubs" up >>>>>>>> ... >>>>>>>> ... >>>>>>>> ... >>>>>>>>
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
Hi Nick!
Thanks so much the task "bro" worked perfectly!
But now in the TASK [snort : Build daq] can not find package
dq-2.0.6-1.src.rpm in snort page.
https://snort.org/downloads/snort/daq-2.0.6-1.src.rpm
2019-05-24 16:30:23 ERRO 404: Not Found.
*Best regards!*
Pablo de Azevedo
Em sex, 24 de mai de 2019 às 09:44, Nick Allen
escreveu:
> Ah, yes, you are right. It sounds like an external change might have
> broken that installation path for the dev environment.
>
> In most cases, we don't install Bro in the dev environment any longer
> because it is just too much to run on a single VM. Keep that in mind for
> your demo. That being said, here are a couple things you could try to work
> around this.
>
> (1) Change the URL for the Bro download. You would need to make that
> change here
> <https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20>.
> Try http instead of https? If that doesn't work, try the proper Zeek URL
> <https://www.zeek.org/downloads/bro-2.6.1.tar.gz> [2] instead of the
> legacy Bro URL.
>
> (2) If that does not work, manually download that tarball and put it on
> your VM at /tmp/bro-2.5.5.tar.gz. If the tarball is already at that
> location, it should skip over the download step.
>
> Best of luck
>
> --
> [1]
> https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20
> [2] https://www.zeek.org/downloads/bro-2.5.5.tar.gz
>
>
> On Thu, May 23, 2019 at 8:46 PM Pablo de Azevedo
> wrote:
>
>> Hi!
>> This python 2.6.6.. version refers to version installed in *node1*:
>>
>> *[vagrant@node1 ~]$ python*
>>> Python 2.6.6 (r266:84292, Aug 18 2016, 15:13:37)
>>> [GCC 4.4.7 20120313 (Red Hat 4.4.7-17)] on linux2
>>
>>
>> In my host is default installation python package:
>>
>> *pablo@ub16042019:~$ python*
>>> Python 2.7.12 (default, Nov 12 2018, 14:36:49)
>>> [GCC 5.4.0 20160609] on linux2
>>
>>
>> I reviewed all the packages on my host but still the error in the TASK
>> [bro : Download bro] continues in node1.
>>
>> *Best regards!*
>> Pablo de Azevedo
>>
>>
>> Em qua, 22 de mai de 2019 às 20:49, Nick Allen
>> escreveu:
>>
>>> You probably have multiple Python versions installed. Take a look at
>>> your error message again. More specifically...
>>>
>>> > ... (the python executable used (/usr/bin/python) is version: 2.6.6
>>> (r266:84292, Aug 18 2016, 15:13:37)
>>>
>>> On Wed, May 22, 2019 at 7:17 PM Pablo de Azevedo <
>>> pablodeazev...@gmail.com> wrote:
>>>
>>>> Hi Simon!
>>>> Yes, my python version is *Python 2.7.12* and my certificates are up
>>>> to date, but the failed again in download bro task.
>>>>
>>>> *Best regards!*
>>>> Pablo de Azevedo
>>>>
>>>>
>>>> Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball <
>>>> si...@simonellistonball.com> escreveu:
>>>>
>>>>> Did you check the python versions and make sure your ca certificates
>>>>> were up-to-date as per the error message?
>>>>>
>>>>> Simon
>>>>>
>>>>> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo <
>>>>> pablodeazev...@gmail.com> wrote:
>>>>>
>>>>>> Hello everybody!
>>>>>> I'm trying install apache with full sensors activated for
>>>>>> demonstration, but I have problems in TASK [bro : Download bro]. What's
>>>>>> happened?
>>>>>> Evidences:
>>>>>>
>>>>>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$
>>>>>>> vagrant --ansible-skip-tags="sensor-stubs" up
>>>>>>> ...
>>>>>>> ...
>>>>>>> ...
>>>>>>> ...
>>>>>>> ...
>>>>>>> TASK [bro : Download bro]
>>>>>>> **
>>>>>>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>>>>>>> "Failed to validate the SSL certificate for www.zeek.org:443. Make
>>>>>>> sure your managed systems have a valid CA certificate installed. If the
>>>>>>> website serving the url uses SNI you
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
Ah, yes, you are right. It sounds like an external change might have broken
that installation path for the dev environment.
In most cases, we don't install Bro in the dev environment any longer
because it is just too much to run on a single VM. Keep that in mind for
your demo. That being said, here are a couple things you could try to work
around this.
(1) Change the URL for the Bro download. You would need to make that
change here
<https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20>.
Try http instead of https? If that doesn't work, try the proper Zeek URL
<https://www.zeek.org/downloads/bro-2.6.1.tar.gz> [2] instead of the legacy
Bro URL.
(2) If that does not work, manually download that tarball and put it on
your VM at /tmp/bro-2.5.5.tar.gz. If the tarball is already at that
location, it should skip over the download step.
Best of luck
--
[1]
https://github.com/apache/metron/blob/0ba18026222f004316b96633780509c71934121e/metron-deployment/ansible/roles/bro/tasks/bro.yml#L20
[2] https://www.zeek.org/downloads/bro-2.5.5.tar.gz
On Thu, May 23, 2019 at 8:46 PM Pablo de Azevedo
wrote:
> Hi!
> This python 2.6.6.. version refers to version installed in *node1*:
>
> *[vagrant@node1 ~]$ python*
>> Python 2.6.6 (r266:84292, Aug 18 2016, 15:13:37)
>> [GCC 4.4.7 20120313 (Red Hat 4.4.7-17)] on linux2
>
>
> In my host is default installation python package:
>
> *pablo@ub16042019:~$ python*
>> Python 2.7.12 (default, Nov 12 2018, 14:36:49)
>> [GCC 5.4.0 20160609] on linux2
>
>
> I reviewed all the packages on my host but still the error in the TASK
> [bro : Download bro] continues in node1.
>
> *Best regards!*
> Pablo de Azevedo
>
>
> Em qua, 22 de mai de 2019 às 20:49, Nick Allen
> escreveu:
>
>> You probably have multiple Python versions installed. Take a look at
>> your error message again. More specifically...
>>
>> > ... (the python executable used (/usr/bin/python) is version: 2.6.6
>> (r266:84292, Aug 18 2016, 15:13:37)
>>
>> On Wed, May 22, 2019 at 7:17 PM Pablo de Azevedo <
>> pablodeazev...@gmail.com> wrote:
>>
>>> Hi Simon!
>>> Yes, my python version is *Python 2.7.12* and my certificates are up to
>>> date, but the failed again in download bro task.
>>>
>>> *Best regards!*
>>> Pablo de Azevedo
>>>
>>>
>>> Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball <
>>> si...@simonellistonball.com> escreveu:
>>>
>>>> Did you check the python versions and make sure your ca certificates
>>>> were up-to-date as per the error message?
>>>>
>>>> Simon
>>>>
>>>> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo <
>>>> pablodeazev...@gmail.com> wrote:
>>>>
>>>>> Hello everybody!
>>>>> I'm trying install apache with full sensors activated for
>>>>> demonstration, but I have problems in TASK [bro : Download bro]. What's
>>>>> happened?
>>>>> Evidences:
>>>>>
>>>>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$
>>>>>> vagrant --ansible-skip-tags="sensor-stubs" up
>>>>>> ...
>>>>>> ...
>>>>>> ...
>>>>>> ...
>>>>>> ...
>>>>>> TASK [bro : Download bro]
>>>>>> **
>>>>>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>>>>>> "Failed to validate the SSL certificate for www.zeek.org:443. Make
>>>>>> sure your managed systems have a valid CA certificate installed. If the
>>>>>> website serving the url uses SNI you need python >= 2.7.9 on your managed
>>>>>> machine (the python executable used (/usr/bin/python) is version: 2.6.6
>>>>>> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
>>>>>> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
>>>>>> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI
>>>>>> verification
>>>>>> in python >= 2.6. You can use validate_certs=False if you do not need to
>>>>>> confirm the servers identity but
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
Hi!
This python 2.6.6.. version refers to version installed in *node1*:
*[vagrant@node1 ~]$ python*
> Python 2.6.6 (r266:84292, Aug 18 2016, 15:13:37)
> [GCC 4.4.7 20120313 (Red Hat 4.4.7-17)] on linux2
In my host is default installation python package:
*pablo@ub16042019:~$ python*
> Python 2.7.12 (default, Nov 12 2018, 14:36:49)
> [GCC 5.4.0 20160609] on linux2
I reviewed all the packages on my host but still the error in the TASK [bro
: Download bro] continues in node1.
*Best regards!*
Pablo de Azevedo
Em qua, 22 de mai de 2019 às 20:49, Nick Allen
escreveu:
> You probably have multiple Python versions installed. Take a look at your
> error message again. More specifically...
>
> > ... (the python executable used (/usr/bin/python) is version: 2.6.6
> (r266:84292, Aug 18 2016, 15:13:37)
>
> On Wed, May 22, 2019 at 7:17 PM Pablo de Azevedo
> wrote:
>
>> Hi Simon!
>> Yes, my python version is *Python 2.7.12* and my certificates are up to
>> date, but the failed again in download bro task.
>>
>> *Best regards!*
>> Pablo de Azevedo
>>
>>
>> Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball <
>> si...@simonellistonball.com> escreveu:
>>
>>> Did you check the python versions and make sure your ca certificates
>>> were up-to-date as per the error message?
>>>
>>> Simon
>>>
>>> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo
>>> wrote:
>>>
>>>> Hello everybody!
>>>> I'm trying install apache with full sensors activated for
>>>> demonstration, but I have problems in TASK [bro : Download bro]. What's
>>>> happened?
>>>> Evidences:
>>>>
>>>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ vagrant
>>>>> --ansible-skip-tags="sensor-stubs" up
>>>>> ...
>>>>> ...
>>>>> ...
>>>>> ...
>>>>> ...
>>>>> TASK [bro : Download bro]
>>>>> **
>>>>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>>>>> "Failed to validate the SSL certificate for www.zeek.org:443. Make
>>>>> sure your managed systems have a valid CA certificate installed. If the
>>>>> website serving the url uses SNI you need python >= 2.7.9 on your managed
>>>>> machine (the python executable used (/usr/bin/python) is version: 2.6.6
>>>>> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
>>>>> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
>>>>> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification
>>>>> in python >= 2.6. You can use validate_certs=False if you do not need to
>>>>> confirm the servers identity but this is unsafe and not recommended. Paths
>>>>> checked for this platform: /etc/ssl/certs,
>>>>> /etc/pki/ca-trust/extracted/pem,
>>>>> /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org,
>>>>> /etc/ansible. The exception msg was: hostname 'www.zeek.org' doesn't
>>>>> match either of 'blog.bro.org', 'bro.org', 'git.bro.org', 'nsf.bro.org',
>>>>> 'tracker.bro.org', 'www.bro.org'."}
>>>>> to retry, use: --limit
>>>>> @/home/pablo/git/apache-metron_0.7.1-rc2/metron-deployment/development/centos6/ansible/playbook.retry
>>>>> PLAY RECAP
>>>>> *
>>>>> node1 : ok=153 changed=33 unreachable=0
>>>>> failed=1
>>>>>
>>>>> Ansible failed to complete successfully. Any error output should be
>>>>> visible above. Please fix these errors and try again.
>>>>
>>>>
>>>>
>>>> *
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
You probably have multiple Python versions installed. Take a look at your
error message again. More specifically...
> ... (the python executable used (/usr/bin/python) is version: 2.6.6
(r266:84292, Aug 18 2016, 15:13:37)
On Wed, May 22, 2019 at 7:17 PM Pablo de Azevedo
wrote:
> Hi Simon!
> Yes, my python version is *Python 2.7.12* and my certificates are up to
> date, but the failed again in download bro task.
>
> *Best regards!*
> Pablo de Azevedo
>
>
> Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball <
> si...@simonellistonball.com> escreveu:
>
>> Did you check the python versions and make sure your ca certificates were
>> up-to-date as per the error message?
>>
>> Simon
>>
>> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo
>> wrote:
>>
>>> Hello everybody!
>>> I'm trying install apache with full sensors activated for demonstration,
>>> but I have problems in TASK [bro : Download bro]. What's happened?
>>> Evidences:
>>>
>>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ vagrant
>>>> --ansible-skip-tags="sensor-stubs" up
>>>> ...
>>>> ...
>>>> ...
>>>> ...
>>>> ...
>>>> TASK [bro : Download bro]
>>>> **
>>>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>>>> "Failed to validate the SSL certificate for www.zeek.org:443. Make
>>>> sure your managed systems have a valid CA certificate installed. If the
>>>> website serving the url uses SNI you need python >= 2.7.9 on your managed
>>>> machine (the python executable used (/usr/bin/python) is version: 2.6.6
>>>> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
>>>> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
>>>> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification
>>>> in python >= 2.6. You can use validate_certs=False if you do not need to
>>>> confirm the servers identity but this is unsafe and not recommended. Paths
>>>> checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem,
>>>> /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org,
>>>> /etc/ansible. The exception msg was: hostname 'www.zeek.org' doesn't
>>>> match either of 'blog.bro.org', 'bro.org', 'git.bro.org', 'nsf.bro.org',
>>>> 'tracker.bro.org', 'www.bro.org'."}
>>>> to retry, use: --limit
>>>> @/home/pablo/git/apache-metron_0.7.1-rc2/metron-deployment/development/centos6/ansible/playbook.retry
>>>> PLAY RECAP
>>>> *
>>>> node1 : ok=153 changed=33 unreachable=0
>>>> failed=1
>>>>
>>>> Ansible failed to complete successfully. Any error output should be
>>>> visible above. Please fix these errors and try again.
>>>
>>>
>>>
>>> ***
>>> Evidences(2):
>>>
>>>
>>> /apache-metron_0.7.1-rc2$ metron-deployment/scripts/platform-info.sh
>>>> Metron 0.7.1
>>>> --
>>>> --
>>>> fatal: your current branch 'master' does not have any commits yet
>>>> --
>>>> --
>>>> ansible 2.4.0.0
>>>> config file = None
>>>> configured module search path =
>>>> [u'/home/pablo/.ansible/plugins/modules',
>>>> u'/usr/share/ansible/plugins/modules']
>>>&g
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
Hi Simon!
Yes, my python version is *Python 2.7.12* and my certificates are up to
date, but the failed again in download bro task.
*Best regards!*
Pablo de Azevedo
Em qua, 22 de mai de 2019 às 12:34, Simon Elliston Ball <
si...@simonellistonball.com> escreveu:
> Did you check the python versions and make sure your ca certificates were
> up-to-date as per the error message?
>
> Simon
>
> On Wed, 22 May 2019 at 16:18, Pablo de Azevedo
> wrote:
>
>> Hello everybody!
>> I'm trying install apache with full sensors activated for demonstration,
>> but I have problems in TASK [bro : Download bro]. What's happened?
>> Evidences:
>>
>> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ vagrant
>>> --ansible-skip-tags="sensor-stubs" up
>>> ...
>>> ...
>>> ...
>>> ...
>>> ...
>>> TASK [bro : Download bro]
>>> **
>>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>>> "Failed to validate the SSL certificate for www.zeek.org:443. Make sure
>>> your managed systems have a valid CA certificate installed. If the website
>>> serving the url uses SNI you need python >= 2.7.9 on your managed machine
>>> (the python executable used (/usr/bin/python) is version: 2.6.6
>>> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
>>> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
>>> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification
>>> in python >= 2.6. You can use validate_certs=False if you do not need to
>>> confirm the servers identity but this is unsafe and not recommended. Paths
>>> checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem,
>>> /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org,
>>> /etc/ansible. The exception msg was: hostname 'www.zeek.org' doesn't
>>> match either of 'blog.bro.org', 'bro.org', 'git.bro.org', 'nsf.bro.org',
>>> 'tracker.bro.org', 'www.bro.org'."}
>>> to retry, use: --limit
>>> @/home/pablo/git/apache-metron_0.7.1-rc2/metron-deployment/development/centos6/ansible/playbook.retry
>>> PLAY RECAP
>>> *
>>> node1 : ok=153 changed=33 unreachable=0
>>> failed=1
>>>
>>> Ansible failed to complete successfully. Any error output should be
>>> visible above. Please fix these errors and try again.
>>
>>
>>
>> ***
>> Evidences(2):
>>
>>
>> /apache-metron_0.7.1-rc2$ metron-deployment/scripts/platform-info.sh
>>> Metron 0.7.1
>>> --
>>> --
>>> fatal: your current branch 'master' does not have any commits yet
>>> --
>>> --
>>> ansible 2.4.0.0
>>> config file = None
>>> configured module search path =
>>> [u'/home/pablo/.ansible/plugins/modules',
>>> u'/usr/share/ansible/plugins/modules']
>>> ansible python module location =
>>> /usr/local/lib/python2.7/dist-packages/ansible
>>> executable location = /usr/local/bin/ansible
>>> python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0
>>> 20160609]
>>> --
>>> Vagrant 2.2.4
>>> --
>>> vagrant-hostmanager (1.8.9, global)
>>> --
>>> Python 2.7.12
>>> --
>>> Apache Maven 3.3.9
>>> Maven home: /usr/share/maven
>>> Java version: 1.8.0_201, vendor: Oracle Corporation
>>> Java home: /usr/lib/
Re: TASK [bro : Download bro] - fatal: [node1]: FAILED!
Did you check the python versions and make sure your ca certificates were
up-to-date as per the error message?
Simon
On Wed, 22 May 2019 at 16:18, Pablo de Azevedo
wrote:
> Hello everybody!
> I'm trying install apache with full sensors activated for demonstration,
> but I have problems in TASK [bro : Download bro]. What's happened?
> Evidences:
>
> /apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ vagrant
>> --ansible-skip-tags="sensor-stubs" up
>> ...
>> ...
>> ...
>> ...
>> ...
>> TASK [bro : Download bro]
>> **
>> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
>> "Failed to validate the SSL certificate for www.zeek.org:443. Make sure
>> your managed systems have a valid CA certificate installed. If the website
>> serving the url uses SNI you need python >= 2.7.9 on your managed machine
>> (the python executable used (/usr/bin/python) is version: 2.6.6
>> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
>> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
>> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification
>> in python >= 2.6. You can use validate_certs=False if you do not need to
>> confirm the servers identity but this is unsafe and not recommended. Paths
>> checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem,
>> /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible.
>> The exception msg was: hostname 'www.zeek.org' doesn't match either of '
>> blog.bro.org', 'bro.org', 'git.bro.org', 'nsf.bro.org', 'tracker.bro.org',
>> 'www.bro.org'."}
>> to retry, use: --limit
>> @/home/pablo/git/apache-metron_0.7.1-rc2/metron-deployment/development/centos6/ansible/playbook.retry
>> PLAY RECAP
>> *
>> node1 : ok=153 changed=33 unreachable=0
>> failed=1
>>
>> Ansible failed to complete successfully. Any error output should be
>> visible above. Please fix these errors and try again.
>
>
>
> ***
> Evidences(2):
>
>
> /apache-metron_0.7.1-rc2$ metron-deployment/scripts/platform-info.sh
>> Metron 0.7.1
>> --
>> --
>> fatal: your current branch 'master' does not have any commits yet
>> --
>> --
>> ansible 2.4.0.0
>> config file = None
>> configured module search path =
>> [u'/home/pablo/.ansible/plugins/modules',
>> u'/usr/share/ansible/plugins/modules']
>> ansible python module location =
>> /usr/local/lib/python2.7/dist-packages/ansible
>> executable location = /usr/local/bin/ansible
>> python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0
>> 20160609]
>> --
>> Vagrant 2.2.4
>> --
>> vagrant-hostmanager (1.8.9, global)
>> --
>> Python 2.7.12
>> --
>> Apache Maven 3.3.9
>> Maven home: /usr/share/maven
>> Java version: 1.8.0_201, vendor: Oracle Corporation
>> Java home: /usr/lib/jvm/java-8-oracle/jre
>> Default locale: pt_BR, platform encoding: UTF-8
>> OS name: "linux", version: "4.4.0-148-generic", arch: "amd64", family:
>> "unix"
>> --
>> Docker version 18.09.6, build 481bc77
>> --
>> node
>> v4.2.6
>> --
>> npm
>> 3.5.2
>> --
>> g++ (Ubuntu 5.4.0-6ubuntu1~16.04.11) 5.4.0 20160609
>> Copyright (C) 2015 Free Software Foundation, Inc.
>> This is free software; see the source for copying conditions. There is NO
>> warranty; not
TASK [bro : Download bro] - fatal: [node1]: FAILED!
Hello everybody!
I'm trying install apache with full sensors activated for demonstration,
but I have problems in TASK [bro : Download bro]. What's happened?
Evidences:
/apache-metron_0.7.1-rc2/metron-deployment/development/centos6$ vagrant
> --ansible-skip-tags="sensor-stubs" up
> ...
> ...
> ...
> ...
> ...
> TASK [bro : Download bro]
> **************
> fatal: [node1]: FAILED! => {"changed": false, "failed": true, "msg":
> "Failed to validate the SSL certificate for www.zeek.org:443. Make sure
> your managed systems have a valid CA certificate installed. If the website
> serving the url uses SNI you need python >= 2.7.9 on your managed machine
> (the python executable used (/usr/bin/python) is version: 2.6.6
> (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat
> 4.4.7-17)]) or you can install the `urllib3`, `pyOpenSSL`,
> `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification
> in python >= 2.6. You can use validate_certs=False if you do not need to
> confirm the servers identity but this is unsafe and not recommended. Paths
> checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem,
> /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible.
> The exception msg was: hostname 'www.zeek.org' doesn't match either of '
> blog.bro.org', 'bro.org', 'git.bro.org', 'nsf.bro.org', 'tracker.bro.org',
> 'www.bro.org'."}
> to retry, use: --limit
> @/home/pablo/git/apache-metron_0.7.1-rc2/metron-deployment/development/centos6/ansible/playbook.retry
> PLAY RECAP
> *
> node1 : ok=153 changed=33 unreachable=0
> failed=1
>
> Ansible failed to complete successfully. Any error output should be
> visible above. Please fix these errors and try again.
***
Evidences(2):
/apache-metron_0.7.1-rc2$ metron-deployment/scripts/platform-info.sh
> Metron 0.7.1
> --
> --
> fatal: your current branch 'master' does not have any commits yet
> --
> --
> ansible 2.4.0.0
> config file = None
> configured module search path =
> [u'/home/pablo/.ansible/plugins/modules',
> u'/usr/share/ansible/plugins/modules']
> ansible python module location =
> /usr/local/lib/python2.7/dist-packages/ansible
> executable location = /usr/local/bin/ansible
> python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0
> 20160609]
> --
> Vagrant 2.2.4
> --
> vagrant-hostmanager (1.8.9, global)
> --
> Python 2.7.12
> --
> Apache Maven 3.3.9
> Maven home: /usr/share/maven
> Java version: 1.8.0_201, vendor: Oracle Corporation
> Java home: /usr/lib/jvm/java-8-oracle/jre
> Default locale: pt_BR, platform encoding: UTF-8
> OS name: "linux", version: "4.4.0-148-generic", arch: "amd64", family:
> "unix"
> --
> Docker version 18.09.6, build 481bc77
> --
> node
> v4.2.6
> --
> npm
> 3.5.2
> --
> g++ (Ubuntu 5.4.0-6ubuntu1~16.04.11) 5.4.0 20160609
> Copyright (C) 2015 Free Software Foundation, Inc.
> This is free software; see the source for copying conditions. There is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
> --
> Compiler is C++11 compliant
> --
> Linux ub1604in2017 4.4.0-148-generic #174-Ubuntu SMP Tue May 7 12:20:14
> UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
> --
> Total System Memory = 15994.3 MB
> Processor Model: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
> Processor Speed: 3361.617 MHz
> Processor Speed: 3448.476 MHz
> Processor Speed: 3323.898 MHz
> Processor Speed: 3400.664 MHz
> Processor Speed: 3359.625 MHz
> Processor Speed: 3283.125 MHz
> Processor Speed: 3382.335 MHz
> Processor Speed: 3275.023 MHz
> Total Physical Processors: 8
> Total cores: 32
> Disk information:
> /dev/sdb195G 52G 38G 58% /
*Best regards!*
Pablo de Azevedo
