[clamav-users] cvdupdate certificate verify failed

[G.W. Haywood]

Hi there,

On Fri, 16 Jul 2021, Moyes, Steven via clamav-users wrote:
> On Fri, 16 Jul 2021, G.W. Haywood via clamav-users wrote:
> > On Fri, 16 Jul 2021, Moyes, Steven via clamav-users wrote:
> >
> >> I've been trying to resolve this for a few weeks and would really appreciate any help.
> >>
> >> ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
> >> failed (_ssl.c:877)
> >
> > Sorry, I've never ysed the Python scripts so I can't call on any
> > experience, but the error message seems fairly clear.  It might help
> > others if you describe what you've done to try to resolve the issue.
> > 
> > Have you for example tried to use freshclam directly?
> 
> If I run freshclam directly on the mirror, it reports the daily.cvd
> is out of date and then proceeds to download the full cvd 3 times.
> I have daily-26232.cdiff downloaded, but this is a zero byte file,
> hence the triple download of the cvd.  main-60.cdiff is the same.

That sounds a little odd.  Are you saying that it downloads the full
CVDs for both main and daily?  Can we see a bit more from the log?

> ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed
> ERROR: downloadPatch: Can't apply patch
> WARNING: Incremental update failed, trying to download daily.cvd

This is normal at the moment, see other correspondence on the list in
the past couple of days about the new releases of 'main' and 'daily'.
You might need to check that your freshclam download timeout settings
aren't too short - half an hour wasn't long enough here - but none of
that has anything to do with your SSL certificate issue.

-- 

73,
Ged.