Hi Artem,

Yes, freshclam does verify the signatures, and you can verify with sigtool --info.

Thanks,

Andy

---

From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Artem via clamav-users <clamav-users@lists.clamav.net>
Sent: Wednesday, June 10, 2020 10:02 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: Artem <temad80@gmail.com>
Subject: [clamav-users] Digital signature verification when updating the virus database

 

Hello,

As it is written in the documentation CVD is a digitally signed container that includes signature databases in various text formats.

Manually we can verify digital signature using "sigtool --info". Correct me if I am wrong.

And second question: Does freshclam automatically verify the digital signature when updating the virus database?

Regards, Artem