[clamav-users] ClamAV 0.103.1 on RHEL 6.7 x32

[Andrew C Aitchison]

On Tue, 6 Apr 2021, Sorin Petrut Niculae via clamav-users wrote:

> Can anyone confirm if is possible to use ClamAV on RHEL 6.7 x32
>
> I was able to install and copy the ddbb files (manually) to /usr/local/share/clamav but when I run clamscan I got the next error message:
>
>  *   [redhat at redhat clamav]$ clamscan -ar /home
>
>  *   LibClamAV Error: cli_cvdload:Corrupted CVD header
>
>  *   LibClamAV Error: Can't load /usr/local/share/clamav/daily.cvd: Malformed database
>
>  *   LibClamAV Error: cli_loadbdir(): error loading database /usr/local/share/clamv/daily.cvd
>
>  *   ERROR: Malformed database

RHEL 6.10 reached EOL in November - more than four months ago.

In particular 6.10 has openssl v1.0.1e which is too old.
RHEL 6.7 is likely to have an even older openssl library.
This is likely to be the main source of your freshclam problems.

Where are you getting your clam package from ?

I do have a copy of clamav 103.1 which I built against OpenSSL 1.1.1c
and run on *64*bit Scientific Linux 6.10 (a clone of RHEL 6.10)
but I copy the database files from an Ubuntu 20.10 machine
rather than run freshclam on this old (virtual) machine.

Unless you have changed the defaults, freshclam needs almost 4GB RAM to
update successfully, which wont help on a 32bit machine.

[ Off topic ]
Ged suggests upgrading RHEL 6 to RHEL 8, skipping RHEL 7.
If you are considering this, consider your other options too.
Not only is RHEL8 very different from RHEL7, the support policy for
the "free version" CentOS8 is radically different and expires sooner
than that of CentOS7.


> And if I'm trying to download the DDBB with freshclam I got the SSL connect error
>
> Tue Apr  6 15:36:15 2021 -> !Download failed (35) Tue Apr  6 15:36:15 2021 -> ! Message: SSL connect error
> Tue Apr  6 15:36:15 2021 -> !getpatch: Can't download daily-26132.cdiff from https://database.clamav.net/daily-26132.cdiff
> Tue Apr  6 15:36:15 2021 -> ^Incremental update failed, trying to download daily.cvd
> Tue Apr  6 15:36:15 2021 -> *Retrieving https://database.clamav.net/daily.cvd
> Tue Apr  6 15:36:15 2021 -> *downloadFile: Download source:      https://database.clamav.net/daily.cvd
> Tue Apr  6 15:36:15 2021 -> *downloadFile: Download destination: /usr/local/share/clamav/tmp.0b80a530f1/clamav-edfe0e16c0b9c746ff8439d366a29b5e.tmp
> * About to connect() to database.clamav.net port 443 (#0)
> *   Trying 104.16.219.84... * connected
> * Connected to database.clamav.net (104.16.219.84) port 443 (#0)
> *   CAfile: /etc/pki/tls/certs/ca-bundle.crt
>  CApath: none
> * NSS error -12190
> * Closing connection #0
> * SSL connect error
>
> Can anyone told me what is necessary to do to run the ClamAV on rhel 6.7 x32
> or to solve those errors?

-- 
Andrew C. Aitchison					Kendal, UK
 			andrew at aitchison.me.uk