From: "Paul Smedley" <ecs-isp@2rosenthals.com>
Content-Type: multipart/alternative;
 boundary="------------yfY6HsYnQF4EOAtlhQGoMO25"
Message-ID: <7a5a82cc-8583-491a-9768-4f2f8b577faf@smedley.id.au>
Date: Fri, 13 Oct 2023 15:42:03 +1030
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [eCS-ISP] ClamAV
Content-Language: en-AU
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-8111147@2rosenthals.com>
In-Reply-To: <list-8111147@2rosenthals.com>

This is a multi-part message in MIME format.
--------------yfY6HsYnQF4EOAtlhQGoMO25
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hi Steven,

On 13/10/23 15:52, Steven Levine wrote:
> In<list-8111072@2rosenthals.com>, on 10/13/23
>     at 10:50 AM, "Paul Smedley"<ecs-isp@2rosenthals.com>  said:
>
> Hi Paul,
>
>>>> This will probably go away once I rebuild clamav 0.103.6 with rpm
>>>> openssl.
>>> This would be good.
>> Fingers crossed.
> Unfortunately, I still have the cert problem:
> <snip>

> * error setting certificate verify locations:  CAfile: /etc/ssl/cacert.pem
> CApath: none * Closing connection 0
> Giving up onhttps://database.clamav.net...
> ERROR: Update failed for database: daily
> ERROR: Database update process failed: Connection failed
> ERROR: Update failed.
> [LibClamAV] cli_rmdirs: Can't locate
> /Internet/clamav/lib/clamav/tmp.82c6d0da0a: No such file or directory
>
> Best I can tell cacert.pem is not shipped by netlabs.
>
> Do you have a /etc/ssl/cacert.pem?
I don't seem to...
>
> FWIW, the error message is coming from the curl library because, at least
> here, verifypeer is set.
>
> Based on our discussion so far, when you run freshclam it dies when it
> runs ou of memory.  Your SSL setup and the file download just works,
> otherwise.  Is this true?

Correct.  I'll rebuild with bww curl to be safe...

We have debug data for everything but clamav.dll, but this dll appears to
> be unused.

Yeah I meant to remove it....

Cheers,

Paul

--------------yfY6HsYnQF4EOAtlhQGoMO25
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hi Steven,<br>
    </p>
    <div class="moz-cite-prefix">On 13/10/23 15:52, Steven Levine wrote:<br>
    </div>
    <blockquote type="cite" cite="mid:list-8111147@2rosenthals.com">
      <pre class="moz-quote-pre" wrap="">In <a class="moz-txt-link-rfc2396E" href="mailto:list-8111072@2rosenthals.com">&lt;list-8111072@2rosenthals.com&gt;</a>, on 10/13/23
   at 10:50 AM, "Paul Smedley" <a class="moz-txt-link-rfc2396E" href="mailto:ecs-isp@2rosenthals.com">&lt;ecs-isp@2rosenthals.com&gt;</a> said:

Hi Paul,

</pre>
      <blockquote type="cite">
        <blockquote type="cite">
          <blockquote type="cite">
            <pre class="moz-quote-pre" wrap="">This will probably go away once I rebuild clamav 0.103.6 with rpm
openssl.
</pre>
          </blockquote>
          <pre class="moz-quote-pre" wrap="">This would be good.
</pre>
        </blockquote>
        <pre class="moz-quote-pre" wrap="">Fingers crossed.
</pre>
      </blockquote>
      <pre class="moz-quote-pre" wrap="">
Unfortunately, I still have the cert problem:
</pre>
    </blockquote>
    <blockquote type="cite" cite="mid:list-8111147@2rosenthals.com">
      <pre class="moz-quote-pre" wrap="">
&lt;snip&gt;</pre>
    </blockquote>
    <br>
    <blockquote type="cite" cite="mid:list-8111147@2rosenthals.com">
      <pre class="moz-quote-pre" wrap="">* error setting certificate verify locations:  CAfile: /etc/ssl/cacert.pem
CApath: none * Closing connection 0
Giving up on <a class="moz-txt-link-freetext" href="https://database.clamav.net">https://database.clamav.net</a>...
ERROR: Update failed for database: daily
ERROR: Database update process failed: Connection failed
ERROR: Update failed.
[LibClamAV] cli_rmdirs: Can't locate
/Internet/clamav/lib/clamav/tmp.82c6d0da0a: No such file or directory

Best I can tell cacert.pem is not shipped by netlabs.

Do you have a /etc/ssl/cacert.pem?</pre>
    </blockquote>
    I don't seem to...<br>
    <blockquote type="cite" cite="mid:list-8111147@2rosenthals.com">
      <pre class="moz-quote-pre" wrap="">

FWIW, the error message is coming from the curl library because, at least
here, verifypeer is set.

Based on our discussion so far, when you run freshclam it dies when it
runs ou of memory.  Your SSL setup and the file download just works,
otherwise.  Is this true?
</pre>
    </blockquote>
    <p>Correct.  I'll rebuild with bww curl to be safe...</p>
    <span style="white-space: pre-wrap">We have debug data for everything but clamav.dll, but this dll appears to</span>
    <blockquote type="cite" cite="mid:list-8111147@2rosenthals.com">
      <pre class="moz-quote-pre" wrap="">be unused.
</pre>
    </blockquote>
    <p>Yeah I meant to remove it....</p>
    <p>Cheers,</p>
    <p>Paul<br>
    </p>
  </body>
</html>

--------------yfY6HsYnQF4EOAtlhQGoMO25--