[clamav-users] 0.102.1 and Solaris 11.3...

[Gary R. Schmidt]

Combined answer to  "J.R." and "Andrew Watkins":

That pointed me at a few things, first, I updated some tools.

I am now using OpenSSL 1.1.1d, bzip2 1.0.8, curl 7.67.0, and GCC 9.1.0.

Configured thusly:

env CONFIG_SHELL=/bin/bash \
	/bin/bash ./configure \
	CONFIG_SHELL=/bin/bash \
	LDFLAGS=-R/opt/local/lib \
	--enable-unrar \
	--disable-ipv6 \
	--disable-silent-rules \
	--disable-check \
	--with-openssl=/opt/local \
	--with-libbz2-prefix=/opt/local \
	--with-libcurl=/opt/local \
	--prefix=/opt/local

Now, I get the following:
=================================================================
Mon Dec  2 14:58:54 2019 -> ClamAV update process started at Mon Dec  2 
14:58:54 2019
Mon Dec  2 14:58:54 2019 -> *Current working dir is 
/home/grs/src/clamav-0.102.1/NEW/
Mon Dec  2 14:58:54 2019 -> *Querying current.cvd.clamav.net
Mon Dec  2 14:58:54 2019 -> *TTL: 993
Mon Dec  2 14:58:54 2019 -> *fc_dns_query_update_info: Software version 
from DNS: 0.102.1
Mon Dec  2 14:58:54 2019 -> *Current working dir is 
/home/grs/src/clamav-0.102.1/NEW/
Mon Dec  2 14:58:54 2019 -> *check_for_new_database_version: No local 
copy of "daily" database.
Mon Dec  2 14:58:54 2019 -> *query_remote_database_version: daily.cvd 
version from DNS: 25650
Mon Dec  2 14:58:54 2019 -> daily database available for download 
(remote version: 25650)
Mon Dec  2 14:58:54 2019 -> *Retrieving 
https://database.clamav.net/daily.cvd
Mon Dec  2 14:58:54 2019 -> *downloadFile: Download source:      
https://database.clamav.net/daily.cvd
Mon Dec  2 14:58:54 2019 -> *downloadFile: Download destination: 
/home/grs/src/clamav-0.102.1/NEW/tmp/clamav-d7fb545c18f86fcdc39d1bdb45d124e1.tmp
*   Trying 104.16.219.84:443...
* TCP_NODELAY set
* Connected to database.clamav.net (104.16.219.84) port 443 (#0)
* ALPN, offering http/1.1
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
...
repeats a couple of times
...
=================================================================

Stepping through the code gets to "curl_easy_perform()," which then 
throws the error.

Google "SSL certificate problem: unable to get local issuer certificate" 
points me at not having new enough root certificate(s).

"wget https://database.clamav.net/daily.cvd" works, dammit!

Q'n'D "cd /opt/local/etc ; ln -s /etc/certs ." didn't fix it.

New root certificates needed?

Or may be cURL isn't finding them??

Might build a debug libcurl...  :->

	Cheers,
		Gary	B-)