[clamav-users] Error when using a private mirror

[Matus UHLAR - fantomas]

On 22.03.17 08:17, David Pullman wrote:
>I'm testing the use of an S3 bucket to store databases for a private
>mirror. I'm getting an error when running freshclam against this private
>mirror. Freshclam successfully downloads the CVD files but then fails. It
>seems to be running "If-Modified-Since"

This is what "PrivateMirror" does. It turns DNS off and uses IMS.

Maybe you should use "DatabaseMirror" instead to check for actual versions.

> after the download and looking for
>the CVD in the wrong place?

Seems you just did not get what DatabaseCustomURL means - it configures
additional URLs, it does not replace standard URLs of http://mirror/main.cvd
etc.

>I've loaded a copy of byte code.cvd, daily.cvd, and main.cvd onto the
>bucket into a folder path clamav/dev/. The freshclam.conf has the following:
>
>PrivateMirror idsstagingtest.s3-website-us-east-1.amazonaws.com
>DatabaseCustomURL
>http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/bytecode.cvd
>DatabaseCustomURL
>http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/daily.cvd
>DatabaseCustomURL
>http://idsstagingtest.s3-website-us-east-1.amazonaws.com/clamav/dev/main.cvd
>
>Note the path portion of the DatabaseCustomURLs. The download runs and
>finds the files:
>
>Wed Mar 22 11:32:50 2017 -> Trying to download
>http://idsstagingtest.s3-website-us-east-1.am
>azonaws.com/clamav/dev/main.cvd
>
>but the subsequent check under If-Modified-Since is looking at the root of
>the bucket:
>
>Wed Mar 22 11:32:58 2017 -> If-Modified-Since: Wed, 16 Mar 2016 23:17:06 GMT
>Wed Mar 22 11:32:58 2017 -> Reading CVD header (main.cvd): Wed Mar 22
>11:32:58 2017 -> Connected to
>idsstagingtest.s3-website-us-east-1.amazonaws.com.
>Wed Mar 22 11:32:58 2017 -> Trying to retrieve CVD header of
>http://idsstagingtest.s3-website-us-east-1.amazonaws.com/main.cvd
>Wed Mar 22 11:32:58 2017 -> WARNING: main.cvd not found on remote server
>
>I did a separate test where I put the files at the root of the bucket and
>it's all right with that.
>
>I was wondering if there is something I've not configured correctly, or is
>it just not supported to use a path in the private mirror specification? It
>seems to work for the download, but the check may be using a different file
>spec?

You can try that one. I'm not sure whether that one works...
-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
My mind is like a steel trap - rusty and illegal in 37 states.