EDR: Unable To Connect To Alliance Since Upgrade To Server 7.5.0

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

EDR Server fails to connect to Alliance with "ssl.SSLError: [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:1129)" seen in the allianceclient.log file.

Environment

• EDR Server: 7.5.0 and Higher

Cause

The urllib (in python 3.9) changed how connections with https are specified so that the target url now needs to be specified with http and/or https.

Resolution

This is being investigated under known issue CB-36765.

Additional Information

The following workaround resolves the issue:

1. Open cb.conf in vi or other text editor: 

   vi /etc/cb/cb.conf

2. Edit AllianceClientProxyUrl to use only HTTP instead of HTTPS:

   AllianceClientProxyUrl=HTTP

3. Restart cb-enterprise services: https://community.carbonblack.com/t5/Knowledge-Base/EDR-How-to-Restart-Server-Services/ta-p/41294