[clamav-users] database updates blocked

[Joel Esler (jesler)]

Thank you Eero.

Yes this, isn’t the server blocking you.  You have a problem with your local CA store.

— 
Sent from my  iPad

> On Aug 17, 2021, at 09:11, Eero Volotinen <eero.volotinen at iki.fi> wrote:
> 
> 
> Please note that python uses different ca locations.
> 
> You can see my message on this mailing list some months ago related to same issue
> 
> 
> Eero
> 
>> On Tue 17. Aug 2021 at 15.57, Jona Tallieu <jona at tnt.be> wrote:
>> Dear,
>> 
>>  
>> 
>> Thanks for your answer.
>> 
>> We are using Freshclam, the curl was a test to see what the problem was.
>> 
>>  
>> 
>> The logs show a SSL CA cert problem:
>> 
>>  
>> 
>> 13:26:22.633 5 EXTFILTER(CGPClamAV) inp(059): * ClamAV update process started at Mon Aug 16 13:26:22 2021
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(048): * WARNING: Your ClamAV installation is OUTDATED!
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(062): * WARNING: Local version: 0.103.2 Recommended version: 0.103.3
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(069): * DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav
>> 
>> 13:26:22.634 5 EXTFILTER(CGPClamAV) inp(083): * daily database available for update (local version: 26231, remote version: 26265)
>> 
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.644 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.646 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(109): * WARNING: downloadPatch: Can't download daily-26232.cdiff from https://database.clamav.net/daily-26232.cdiff
>> 
>> 13:26:24.651 5 EXTFILTER(CGPClamAV) inp(066): * WARNING: Incremental update failed, trying to download daily.cvd
>> 
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(104): * WARNING: Download failed (77) * WARNING: Message: Problem with the SSL CA cert (path? access rights?)
>> 
>> 13:26:24.653 5 EXTFILTER(CGPClamAV) inp(078): * WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
>> 
>>  
>> 
>> But the ca-certificates package (which contains the CA roots) is the most recent version. Other Cloudflare hosted url’s (with the same TLS settings) work fine…
>> 
>>  
>> 
>>  
>> 
>> Best,
>> 
>>  
>> 
>> Jona
>> 
>>  
>> 
>>  
>> 
>>  
>> 
>>  
>> 
>> From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of "Joel Esler (jesler) via clamav-users" <clamav-users at lists.clamav.net>
>> Reply-To: ClamAV users ML <clamav-users at lists.clamav.net>
>> Date: Tuesday, 17 August 2021 at 14:45
>> To: ClamAV users ML <clamav-users at lists.clamav.net>
>> Cc: "Joel Esler (jesler)" <jesler at cisco.com>
>> Subject: Re: [clamav-users] database updates blocked
>> Resent-From: <jona at mail.tnt.be>
>> Resent-Date: Tuesday, 17 August 2021 at 14:45
>> 
>>  
>> 
>> Curl is not authorized to be used to download updates.  Please use Freshclam or cvdupdate to download updates. 
>> 
>>  
>> 
>> 
>> _______________________________________________
>> 
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> 
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210817/e5ad9c5e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1872 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210817/e5ad9c5e/attachment.bin>