From: "Steven Levine" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPS id 8111038 for ecs-isp@2rosenthals.com; Thu, 12 Oct 2023 19:42:21 -0400 Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:58186 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1qr5Ji-0005ns-2k for ecs-isp@2rosenthals.com; Thu, 12 Oct 2023 19:42:10 -0400 Received: from mta-102b.earthlink-vadesecure.net ([51.81.61.67]:50895 helo=mta-102a.earthlink-vadesecure.net) by mail2.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1qr5Jf-0006rF-1E for ecs-isp@2rosenthals.com; Thu, 12 Oct 2023 19:42:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; bh=239Y5cUYzXiexGacA4QZy0ngHXPgnddQw+nKqO SHF20=; c=relaxed/relaxed; d=earthlink.net; h=from:reply-to:subject: date:to:cc:resent-date:resent-from:resent-to:resent-cc:in-reply-to: references:list-id:list-help:list-unsubscribe:list-subscribe:list-post: list-owner:list-archive; q=dns/txt; s=dk12062016; t=1697154126; x=1697758926; b=rIMPTcwzMaFvWLPlaFasdcM/zw7pwibc1GNwp48nw0Rv8sXkjLz2UYd GCYgNfjUOb6hz5erffb+Ck0ci2RoMPT3ADA3AsaFdeQ5IcY547bSpgshGc7pkl1ryn4V/fO dthKKdGwqSqw8lMV0ERXU65O4AVL7r+NbDA0LwQrby3+3jAFMRx69sfcPOaX2Bn4nayvqpH P5xd5uaGuS15buuQqHCwErvuv0LiMrKYzDaATSSxD/0pjHhpUCzNz4OVzRBGOiQvWZ2j+lb hswpLMshVj7jLDwPVx5oFoMkEuvpNMh/9SY3M/gKfjAvfLIoNFubTMHOWTXLW4V4S3ZaVyz +oQ== Received: from slamain ([108.193.253.247]) by vsel1nmtao02p.internal.vadesecure.com with ngmta id 2528dd9c-178d80afa9a65de9; Thu, 12 Oct 2023 23:42:06 +0000 Message-ID: <65288e6f.4.mr2ice.fgrirsq@earthlink.net> Date: Thu, 12 Oct 2023 16:25:19 -0800 To: "eCS ISP Mailing List" In-Reply-To: Subject: Re: [eCS-ISP] ClamAV Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable X-Mailer: MR/2 Internet Cruiser Edition for OS/2 v3.00.11.24/60 In , on 10/13/23 at 09:25 AM, "Paul Smedley" said: Hi Paul, >> Can't or won't. I'm not that familar with ClamAV. >Both I think - at some point they claim to stop=A0 supporting older >version - perhaps there are differences=A0 in the binary formats of the = >signatures? From what I've seen so far, it's mostly freshclam that is forcing the updates, because that's what it is designed to do. Clamscan seems to accept any .cvd file that is marked binary compatible. For example, the signatures I downloaded today are going to run with the current 1.2 on other platforms. Your 0.103.6 build accepted them without complaints. I= did get to reboot, but that's on me. >> Freshclam 0.103.6 fails with an SSL issue here. What .pem file is >> freshclam looking for when it complains about: >> * error setting certificate verify locations: CAfile: >> /etc/ssl/cacert.pem CApath: none >> If I create cacert.pem and make it read-only, the error changes to: >> ERROR: Download failed (77) ERROR: Message: Problem with the SSL C= A >> cert (path? access rights?) >This will probably go away once I rebuild clamav 0.103.6 with rpm >openssl. This would be good. >Build is running now. With debug symbols, I hope. :-) FWIW, the memory usage problem may be beyond our ability to resolve, but I'm willing to do some investigation, as time permits. Steven -- ---------------------------------------------------------------------- "Steven Levine" Warp/DIY/BlueLion etc. www.scoug.com www.arcanoae.com www.warpcave.com ----------------------------------------------------------------------