Page 1 of 1

ERROR: Download failed with ERROR (3)

Posted: Wed Mar 31, 2021 5:36 pm
by ccollier
I am trying to install the ossec+ I have a fresh install of umbuntu 21
I have followed the instructions carefully on the email sent
I searched.
trying installing all the requirements from this page
https://www.ossec.net/docs/docs/manual/ ... index.html

and when I try to update
I get the error 3

I have no idea what that is!

Since I simply wish to test before purchasing!! I skip the update and go for the next step and I get....

Installing Package: kofe

/usr/sbin/oum: line 434: yum: command not found


I am completely frustrated. I spent nearly the entire day on this!!

can someone help!!
thank you



root@osm:~# oum update
===============================================================================
Component Version
===============================================================================
Upgrading:
OSSEC-CRS-Rules 2.0
Atomicorp-Threatfeed 20210331


===============================================================================

Is this ok [y/N]: y
Downloading Rule update: 2.0
ERROR: Download failed with ERROR (3)

Re: ERROR: Download failed with ERROR (3)

Posted: Mon Apr 05, 2021 6:33 pm
by mikeshinn
What distro are you using?

Re: ERROR: Download failed with ERROR (3)

Posted: Fri Apr 09, 2021 9:10 am
by tonny
Hi,

Seen it too, it's not that hard.
ccollier wrote: Wed Mar 31, 2021 5:36 pm /usr/sbin/oum: line 434: yum: command not found
quite common for a dristro that does not use yum by default (like debian)
Just install the yum package, and it will work like a charm

//Tonny

Re: ERROR: Download failed with ERROR (3)

Posted: Tue May 04, 2021 6:43 am
by ryantracey
Hi

If your registration password contains a "!" it'll mess with the shell script which at some point does this:

Code: Select all

curl --write-out '%{http_code}' 'https://yourusername:yourpassword@updates.atomicorp.com/channels/rules/ossec/ossec-crs-rules-2.0.tar.gz' -o /var/ossec/tmp/ossec-crs-rules-2.0.tar.gz
If yourpassword contains a "!" it'll result in an error.

Code: Select all

curl: (3) URL using bad/illegal format or missing URL
If your password does contain a "!" then you'll need to reset it in the ossec.net/atomicorp.com console and then manually edit /var/ossec/etc/oum.conf.

Discovered this using:

Code: Select all

DEBUG=true oum update
Hope this helps anyone who might stumble across this answer.

- Ryan