Version
This solution applies to Carbon Black versions v4.2.0 and earlier.
Issue
Following installation of the ThreatConnect Alliance Feed, starting the bridge fails with the following message:
[root@cb ~]# /etc/init.d/cb-threatconnect-bridge start Starting cb-threatconnect-bridge: Traceback (most recent call last): File "/usr/share/cb/integrations/carbonblack_threatconnect_bridge/carbonblack_threatconnect_bridge", line 4, in <module> import cbthreatconnectbridge.bridge File "/usr/lib/python2.6/site-packages/cbthreatconnectbridge/bridge.py", line 18, in <module> from cbint.utils import cb_crypto ImportError: cannot import name cb_crypto |
Solution
To resolve the issue run the following on the Carbon Black server to copy the necessary cb_crypto files:
cp /usr/lib/python2.6/site-packages/cb/utils/cb_crypto.* /usr/lib/python2.6/site-packages/cbint/utils |
Then see that the bridge starts successfully:
/etc/init.d/cb-threatconnect-bridge start |
Important Note(s)
Defect FEED-107 refers to this issue, and the fix is included in Carbon Black v4.2.1.