[clamav-users] freshclam cert problems with new install

[fergus mcmenemie]

Hi - first posting here

Brand new install of clamav and first thing I ran was "sudo freshclam" which gave the following.

	McMadmin: sudo freshclam                  
	ClamAV update process started at Thu Feb 24 20:38:54 2022
	daily database available for download (remote version: 26463)
	WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
	WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
	Trying again in 5 secs...
	daily database available for download (remote version: 26463)
	WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
	WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
	Trying again in 5 secs...
	daily database available for download (remote version: 26463)
	ERROR: Download failed (60) ERROR:  Message: SSL peer certificate or SSH remote key was not OK
	ERROR: Can't download daily.cvd from https://database.clamav.net/daily.cvd
	Giving up on https://database.clamav.net...
	ERROR: Update failed for database: daily
	ERROR: Database update process failed: Connection failed
	ERROR: Update failed.

So then I used 

	openssl s_client -connect database.clamav.net:443 -servername clamav.net -showcerts | openssl x509 -text -noout


Which returned

	depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority
	verify error:num=20:unable to get local issuer certificate
	Certificate:
	    Data:
	        Version: 3 (0x2)
	        Serial Number:
	            e7:28:4e:d7:e1:29:eb:04:df:95:78:6a:e4:cd:8a:d0
	    Signature Algorithm: ecdsa-with-SHA256
	        Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2
	        Validity
	            Not Before: Apr  6 00:00:00 2020 GMT
	            Not After : Oct 13 23:59:59 2020 GMT
	        Subject: CN = ssl392509.cloudflaressl.com
	        Subject Public Key Info:
	            Public Key Algorithm: id-ecPublicKey
	                Public-Key: (256 bit)
	                pub:
	                    04:0c:b2:3d:e1:a0:35:46:7b:0c:30:95:c6:62:17:
	                    5d:b1:a0:04:71:27:f5:d7:30:4b:fa:fa:db:ec:5f:
	                    20:c3:58:dc:12:cc:b2:62:31:f1:1e:5e:99:8f:dd:

Looks like the cert expired months ago. .... Or am I doing something wrong.

Is there an alternate mirror I can try. I am UK based.


Thanks in advance.