Coder Social home page Coder Social logo

cb-fidelis-connector's People

Contributors

cb-buildbox avatar jgarman avatar klazaga avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

cb-fidelis-connector's Issues

handle 500 from Cb Response 5.2 when querying v1/sensor

Here is the stack trace:

2016-11-16 08:03:43,700: flask: ERROR: Exception on /fidelis/register [POST]
Traceback (most recent call last):
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/flask.app", line 1988, in wsgi_app
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/flask.app", line 1641, in full_dispatch_request
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/flask.app", line 1544, in handle_user_exception
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/flask.app", line 1639, in full_dispatch_request
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/flask.app", line 1625, in dispatch_request
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/cbopensource.connectors.fidelis.bridge", line 268, in handle_fidelis_registration
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/cbapi.cbapi", line 308, in sensors
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.3/build/cb-fidelis-connector/out00-PYZ.pyz/requests.models", line 862, in raise_for_status
HTTPError: 500 Server Error: INTERNAL SERVER ERROR for url: https://every-year-tennis.my.carbonblack.io/api/v1/sensor?ip=5.89.33.166&
2016-11-16 08:03:43,701: werkzeug: INFO: 127.0.0.1 - - [16/Nov/2016 08:03:43] "POST /fidelis/register HTTP/1.0" 500 -

URL to logo is the full path on disk

See https://github.com/carbonblack/cb-fidelis-connector/blob/master/cbopensource/connectors/fidelis/bridge.py#L80

The URL for the logo is the logo's path on disk. Which leads to:

2016/09/21 12:58:13 [error] 42496#0: *122943 open() "/etc/nginx/html/usr/share/cb/integrations/carbonblack_fidelis_bridge/fidelis.png" failed (2: No such file or directory), client: 12.12.246.42, server: foo-bar.my.carbonblack.io, request: "GET /usr/share/cb/integrations/carbonblack_fidelis_bridge/fidelis.png HTTP/1.1", host: "foo-bar.my.carbonblack.io", referrer: "https://foo-bar.my.carbonblack.io/"

Note GET /usr/share/cb/integrations/carbonblack_fidelis_bridge/fidelis.png HTTP/1.1"

hardcoded localhost reference

stack trace at startup:

[root@foo-bar ~]# service cb-fidelis-bridge start
Starting cb-fidelis-bridge: Traceback (most recent call last):
  File "<string>", line 19, in <module>
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/cbopensource.connectors.fidelis.bridge", line 94, in __init__
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.api", line 69, in get
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.api", line 50, in request
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.sessions", line 465, in request
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.sessions", line 594, in send
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.sessions", line 196, in resolve_redirects
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.sessions", line 573, in send
  File "/home/builduser/rpmbuild/BUILD/python-cb-fidelis-bridge-1.2/build/cb-fidelis-connector/out00-PYZ.pyz/requests.adapters", line 431, in send
requests.exceptions.SSLError: hostname 'localhost' doesn't match either of '*.my.carbonblack.io', 'my.carbonblack.io'

config:

[bridge]
listener_port=8000
listener_address=0.0.0.0
listener_api_token=yyy
carbonblack_server_url=https://foo-bar.my.carbonblack.io
carbonblack_server_token=xxx
carbonblack_server_sslverify=1
feed_sync_interval=15
debug=0

looks like a request to localhost is hardcoded in there somewhere. changing carbonblack_server_sslverify to 0 has no impact.

[root@foo-bar ~]# rpm -qa | grep fidelis
python-cb-fidelis-bridge-1.2-1.x86_64

configuration page includes server token

connector requires a server API token to query the REST API. The bridge configuration page returned by / endpoint includes all the entries from the config, including the server token.

server token should be stripped.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.