Creating services and collections.

[mattclemons]

Creating services and collections.

[FloatingGhost]

#3

ALTER DATABASE taxiipersist CHARACTER SET latin1 COLLATE latin1_general_ci;
ALTER DATABASE taxiiauth CHARACTER SET latin1 COLLATE latin1_general_ci;

[FloatingGhost]

make sure you upgrade mysql as well. It's a weird one.

[mattclemons]

Thanks! I made it through the config, but now I'm getting this error when trying to push. taxii-push --path http://localhost:9000/services/inbox -f test.xml --dest collection --username root --password password 2017-06-14 09:47:08,506 INFO: Sending Inbox_Message to http://localhost:9000/services/inbox 2017-06-14 09:47:08,770 ERROR: FAILURE: There was a failure while executing the message handler

…

On Wed, Jun 14, 2017 at 3:07 PM, Hannah Ward ***@***.***> wrote: #3 <#3> ALTER DATABASE taxiipersist CHARACTER SET latin1 COLLATE latin1_general_ci;ALTER DATABASE taxiiauth CHARACTER SET latin1 COLLATE latin1_general_ci; — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#10 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ATa-ke-Jga7U2yUQDJrfwykCVgvO34nIks5sED2KgaJpZM4N6VZP> .

-- Regards, Matt Clemons [phone]

[FloatingGhost]

hm, that means there's an issue with the hooks - there should be a server log

does it say anything?

[mattclemons]

error.txt

[mastarux]

can you post service.yml and collection.yml ?

Thanks
MAstarux

[mattclemons]

They're defaults. Guess I should read up on that.

services.yaml.txt
collections.yaml.txt

[FloatingGhost]

It's not the config that's the issue, don't chase that line.

It's a weird STIX document - I only built the converter for standard, sample STIX, but it seems us-cert use a variant. Is the STIX file something you can share?

[FloatingGhost]

(it's 1am here, I'll get back to you in the morning if you comment!)

[mastarux]

out of curiosity, do you get same error for other xml files under tests/ ?

[FloatingGhost]

Ok, looked into it - on the current version of python-stix, tests/malicious-email-indicator-with-attachment.xml loads just fine, so maybe try updating that dep if it doesn't work for you.

It all seems to be on their end actually - it just plain won't load the US-CERT file. It doesn't seem to support something in there, and I don't know XML terminology well enough to diagnose it.

NotImplementedError: No class implemented or registered for XML type '{http://www.us-cert.gov/sites/default/files/STIX_Namespace/ISAMarkingsType.v2.xsd}ISAMarkingsType'

Looking at this, and this issue, it would appear that python-stix does not support ISA marking.

I'll try to hack around it by removing ISA from the initial XML, but it'll take a while

[mattclemons]

Well, don't work too hard on this. It's already driving me crazy enough that I constantly wish it would all just go away.

[FloatingGhost]

It's already driving me crazy enough that I constantly wish it would all just go away.

Welcome to STIX!

It's the quickest way to hate everything.

I've pushed something that seems to work, try that (0c359dc)

[FloatingGhost]

Oh, BTW, that's of the converter. I didn't make that clear

[mattclemons]

IT'S WORKING!

[FloatingGhost]

Wonderful, nice to know my stupid hack worked~