[clamav-users] New installation 103.3; failing freshclam

[Micah Snyder (micasnyd)]

This specific error comes from the libcurl library. I imagine we could detect the associated error code and supplement the message with more actionable advice.  If anyone is up for figuring that out, a PR would be welcome.

How you fix this problem is going to vary depending on what OS you're on. 
- Mac & Windows installations will use the macOS Keychain or Windows Certificate Store (the same one used by Edge or Firefox).
- Linux and other Unix installations use the openssl certificate directory. By default that is probably in /etc/ssl/certs or /etc/pki/tls/certs but may vary by distribution. Having the ca-certificates package (ubuntu) or equivalent is usually sufficient.

Sometimes TLS validation also fails if the CA certs are fine but the system time is incorrect. 

-Micah

> -----Original Message-----
> From: clamav-users <clamav-users-bounces at lists.clamav.net> On Behalf Of
> Paul Rogers via clamav-users
> Sent: Wednesday, June 23, 2021 12:19 PM
> To: clamav-users at lists.clamav.net
> Cc: Paul Rogers <paulgrogers at fastmail.fm>
> Subject: [clamav-users] New installation 103.3; failing freshclam
> 
> I find the error message unhelpful.  Can you provide a more actionable
> interpretation, please?  I've just updated certificates from Mozilla but no joy.
> 
> --
> Paul Rogers
> paulgrogers at fastmail.fm
> Rogers' Second Law: "Everything you do communicates."
> (I do not personally endorse any additions after this line. TANSTAAFL :-)