Issue WAF ModSecurity Comodo (Free) Error

[ggorg]

Hi to all of you,

I need you help/input on how to solve an error.

I am having an issue with Comodo (Free) in WAF ModSecurity when I try to switch to it.

Here is the error:

Failed to install the ModSecurity rule set: modsecurity_ctl failed: ERROR:root:Error
Traceback (most recent call last):
File "/usr/lib64/plesk-9.0/modsecurity_get_vendor_ruleset/modsecurity_get_vendor_ruleset.py", line 53, in main
File "/usr/lib64/plesk-9.0/modsecurity_get_vendor_ruleset/modsecurity_get_vendor_ruleset.py", line 35, in get_vendor_ruleset
File "/usr/lib64/plesk-9.0/modsecurity_get_vendor_ruleset/plesk_atomic.py", line 105, in download
with closing(urllib2.urlopen(url, timeout=15)) as fin:
File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib64/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/usr/lib64/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/usr/lib64/python2.7/urllib2.py", line 1258, in https_open
context=self._context, check_hostname=self._check_hostname)
File "/usr/lib64/python2.7/urllib2.py", line 1214, in do_open
raise URLError(err)
URLErrorWrapper: Error interacting with https://waf.comodo.com/doc/meta_comodo_apache.yaml: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)>
Unable to download comodo_free rule set

I am running Plesk Obsidian 18.0.27 Update #1 on CentOS Linux 7.8.2003 (Core)

I googled the error but no luck.

TY in advance for your help.

I wish you all a great day/evening.

BR
Greg

 

[IgorG]

Resolved - Issue installing modsecurity

Hello, I'm facing an issue with modsecurity, actually one website is facing a false-positive for comodo waf rules: [file "/etc/httpd/conf/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "38"] [id "214940"] [file...

talk.plesk.com

 

[NetConsulting]

In case somebody has the same issue, we solved it with this solution: Fixing the Breakage from the AddTrust External CA Root Expiration published on May 30, 2020:

Run apt-get update
Run apt-get install ca-certificates
Edit /etc/ca-certificates.conf and put an exclamation mark ! (do not comment it with #) before mozilla/AddTrust_External_Root.crt: !mozilla/AddTrust_External_Root.crt.
Run update-ca-certificates

Best regards from Spain.

 

[sosbilisim]

hello, i have issue "modsecurity_ctl failed: Failed to download comodo rule set." Centos 7 x64 plesk lastest updates installed.

 

[Azurel]

@sosbilisim See Free Modsecurity rules - Comodo Web Application Firewall (not pinned threads)
Thats not a issue with plesk. Comodo rule sets are online offline online offline online offline..... all comodo workers in covid-19 homeoffice party? ^^

 

[ahoi]

Are you sure?

Issue - modsecurity_ctl failed: Failed to download comodo_free rule set

Hello everybody, on a fresh Debian 10.9 setup with Plesk I am unable to install mod_security with free Comodo ruleset. I am getting this error: modsecurity_ctl failed: Failed to download comodo_free rule set Logs at /var/log/plesk/install/modsecurity_ctl.log are telling me this...

talk.plesk.com

ScannerError: mapping values are not allowed here


in "<string>", line 39, column 26:


'allowLinker': true

does not give me a hint for something being offline...