[clamav-users] New installation 103.3; failing freshclam

[Robert M. Stockmann]

On Sun, 18 Jul 2021, Paul Rogers via clamav-users wrote:

> Date: Sun, 18 Jul 2021 09:06:50 -0700
> From: Paul Rogers via clamav-users <clamav-users at lists.clamav.net>
> To: clamav-users at lists.clamav.net
> Cc: Paul Rogers <paulgrogers at fastmail.fm>
> Subject: Re: [clamav-users] New installation 103.3; failing freshclam
> 
> >>------------
> >>[09:37 scripts]# cat ~/fresh.log
> >>Sat Jul 17 09:25:51 2021 -> ClamAV update process started at Sat Jul 17 09:25:51 2021
> >>Sat Jul 17 09:25:51 2021 -> daily database available for download (remote version: 26235)
> >>Sat Jul 17 09:25:51 2021 -> ^Download failed (77) 
> >>Sat Jul 17 09:25:51 2021 -> ^ Message: Problem with the SSL CA cert (path? access rights?)
> >
> >doesn't the message "Problem with the SSL CA cert (path? access rights?)"
> >ring a bell?
> >
> >do you have CA certificates installed? 
> 
> Certainly, as far as the instructions go.  I showed how I got them in my prior message, along with the package build config files showing that they all SHOULD be looking in /etc/ssl.  I don't know which pem file is the one clam wants though, that name hasn't been presented.  (I may be new to clam, but I've been building & running my own LFS systems since 2004.)
> 
> [08:49 ~]$ cd /etc/ssl
> [08:52 ssl]$ ls -l
> total 2464
> -rw-r--r-- 1 root root  721996 Apr 10 12:49 ca-bundle.crt
> -rw-r--r-- 1 root root 1169241 Apr 10 12:49 certdata.txt
> drwxr-xr-x 4 root root   12288 Apr 10 12:49 certs
> -rw-r--r-- 1 root root  536403 Apr 10 12:49 email-ca-bundle.crt
> drwxr-xr-x 5 root root    4096 Jul  5 18:25 html
> drwxr-xr-x 2 root root    4096 Apr 10 12:48 java
> drwxr-xr-x 2 root root    4096 Apr 10 12:46 local
> drwxr-xr-x 2 root root    4096 Jul  7 22:42 misc
> -rw-r--r-- 1 root root   17274 Apr 10 12:49 objsign-ca-bundle.crt
> -rw-r--r-- 1 root root   10835 Jul  7 22:42 openssl.cnf
> -rw-r--r-- 1 root root   10835 Jan 30 15:30 openssl.cnf.org
> drwxr-xr-x 2 root root    4096 Jul  7 22:42 private
> [08:53 ssl]$ ls -l certs|head
> total 1112
> lrwxrwxrwx 1 root root   12 Jul  2 10:33 002c0b4f.0 -> 002c0b4f.pem
> -rw-r--r-- 1 root root 7079 Jul  2 10:33 002c0b4f.pem
> lrwxrwxrwx 1 root root   12 Apr 10 12:49 02265526.0 -> 02265526.pem
> -rw-r--r-- 1 root root 5055 Apr 10 12:48 02265526.pem
> lrwxrwxrwx 1 root root   12 Apr 10 12:49 03179a64.0 -> 03179a64.pem
> -rw-r--r-- 1 root root 7266 Apr 10 12:48 03179a64.pem
> lrwxrwxrwx 1 root root   12 Apr 10 12:49 062cdee6.0 -> 062cdee6.pem
> -rw-r--r-- 1 root root 4531 Apr 10 12:48 062cdee6.pem
> lrwxrwxrwx 1 root root   12 Apr 10 12:49 064e0aa9.0 -> 064e0aa9.pem
> 

I'd like to point to the following thread :

Thread: ubuntu 18.04 LTS cannot verify SSL certificate
https://ubuntuforums.org/showthread.php?t=2464923 

where the same error shows up, because a package by the name
Cisco PacketTracer 7.3.1 was installed .

Robert
-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock at stokkie.net