From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <6528d417.10.mr2ice.fgrirsq@earthlink.net>
Date: Thu, 12 Oct 2023 21:22:31 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-8111072@2rosenthals.com>
Subject: Re: [eCS-ISP] ClamAV

In <list-8111072@2rosenthals.com>, on 10/13/23
   at 10:50 AM, "Paul Smedley" <ecs-isp@2rosenthals.com> said:

Hi Paul,

>>> This will probably go away once I rebuild clamav 0.103.6 with rpm
>>> openssl.
>> This would be good.
>Fingers crossed.

Unfortunately, I still have the cert problem:

freshclam --debug --verbose
--config-file=/Internet/clamav/etc/freshclam.conf Current working dir is
/Internet/clamav/lib/clamav/
Loaded freshclam.dat:
  version:    1
  uuid:       cf7346ca-6cc9-4f1b-91f9-981ee6f9d7b9
ClamAV update process started at Thu Oct 12 21:22:13 2023
Current working dir is /Internet/clamav/lib/clamav/
Querying current.cvd.clamav.net
TTL: 594
fc_dns_query_update_info: Software version from DNS: 0.103.10 WARNING:
Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.103.6 Recommended version: 0.103.10 DON'T PANIC!
Read https://docs.clamav.net/manual/Installing.html Current working dir is
/Internet/clamav/lib/clamav/
check_for_new_database_version: No local copy of "daily" database.
query_remote_database_version: daily.cvd version from DNS: 27059 daily
database available for download (remote version: 27059) Retrieving
https://database.clamav.net/daily.cvd
downloadFile: Download source:      https://database.clamav.net/daily.cvd
downloadFile: Download destination:
/Internet/clamav/lib/clamav/tmp.82c6d0da0a/clamav-d26a9c01a49cfe9aaf082622b9fdddb6.tmp
ERROR: Download failed (77) ERROR:  Message: Problem with the SSL CA cert
(path? access rights?) ERROR: Can't download daily.cvd from
https://database.clamav.net/daily.cvd *   Trying 104.16.219.84:443...
* Connected to database.clamav.net (104.16.219.84) port 443 (#0) * ALPN,
offering http/1.1
* error setting certificate verify locations:  CAfile: /etc/ssl/cacert.pem
CApath: none * Closing connection 0
Giving up on https://database.clamav.net...
check_for_new_database_version: No local copy of "daily" database.
query_remote_database_version: daily.cvd version from DNS: 27059 daily
database available for download (remote version: 27059) Retrieving
https://database.clamav.net/daily.cvd
downloadFile: Download source:      https://database.clamav.net/daily.cvd
downloadFile: Download destination:
/Internet/clamav/lib/clamav/tmp.82c6d0da0a/clamav-d455b27f465f04cbeb70321557254227.tmp
ERROR: Download failed (77) ERROR:  Message: Problem with the SSL CA cert
(path? access rights?) ERROR: Can't download daily.cvd from
https://database.clamav.net/daily.cvd *   Trying 104.16.219.84:443...
* Connected to database.clamav.net (104.16.219.84) port 443 (#0) * ALPN,
offering http/1.1
* error setting certificate verify locations:  CAfile: /etc/ssl/cacert.pem
CApath: none * Closing connection 0
Giving up on https://database.clamav.net...
ERROR: Update failed for database: daily
ERROR: Database update process failed: Connection failed
ERROR: Update failed.
[LibClamAV] cli_rmdirs: Can't locate
/Internet/clamav/lib/clamav/tmp.82c6d0da0a: No such file or directory

Best I can tell cacert.pem is not shipped by netlabs.

Do you have a /etc/ssl/cacert.pem?

FWIW, the error message is coming from the curl library because, at least
here, verifypeer is set.

Based on our discussion so far, when you run freshclam it dies when it
runs ou of memory.  Your SSL setup and the file download just works,
otherwise.  Is this true?

>Well that was the main reason for the rebuild :P 
>https://smedley.id.au/tmp/clamav-0.103.6-os2-20231013-debug.zip

We have debug data for everything but clamav.dll, but this dll appears to
be unused.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------