I would double-check to make sure python3 is using the correct CA bundle. On recent python3 versions, that should be the certifi bundle.
$ which python3            
/opt/homebrew/bin/python3
$ /opt/homebrew/bin/python3 --version
Python 3.9.10
$ python3 -m certifi
/opt/homebrew/lib/python3.9/site-packages/certifi/cacert.pem

I was able to install and run cvdupdate without any errors on MacOS 12.2.1.
$ python3 -m cvdupdate config set --dbdir cvdupdate
$ python3 -m cvdupdate update                      
2022-03-07 11:40:26 cvdupdate-1.0.2 INFO Downloaded main-62.cdiff
2022-03-07 11:40:32 cvdupdate-1.0.2 INFO Downloaded main.cvd. Version: 62
2022-03-07 11:40:32 cvdupdate-1.0.2 INFO Downloaded daily-26474.cdiff
2022-03-07 11:40:36 cvdupdate-1.0.2 INFO Downloaded daily.cvd. Version: 26474
2022-03-07 11:40:36 cvdupdate-1.0.2 INFO Downloaded bytecode-333.cdiff
2022-03-07 11:40:37 cvdupdate-1.0.2 INFO Downloaded bytecode.cvd. Version: 333
$ ls cvdupdate
bytecode-333.cdiff bytecode.cvd daily-26474.cdiff daily.cvd dns.txt main-62.cdiff main.cvd

--Maarten

On Mon, Mar 7, 2022 at 11:32 AM Jonah McElfatrick via clamav-users <clamav-users@lists.clamav.net> wrote:

Hello,

After taking your advice I located the post in which you are referencing and attempted multiple of the solutions provided. Unfortunately though, none of the provided solutions seem to have resolved the issue.

In addition,I have found that using the fresh clam tool also results in the following SSL authentication error:
WARNING: Download failed (60) WARNING: Message: SSL peer certificate or SSH remote key was not OK

Due to the similar errors, I therefore no longer think it to be an isolated issue with python or the openssl library.

I did not mention in my previous email but the operating system this is running on is MacOS 11.6.4. 

Any additional help would be much appreciated.

Thanks,
Jonah




On 2 Mar 2022, at 16:58, G.W. Haywood via clamav-users <clamav-users@lists.clamav.net> wrote:

Hi there,

On Wed, 2 Mar 2022, Jonah McElfatrick via clamav-users wrote:

I am trying to mirror the definitions database using the recommended
cvdupdate python script, however I am getting the following error
code: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed: unable to get local issuer certificate
...

Sorry, a bit pressed just now.

Check my posts to this list for the last couple of days, there are a
few links in one of them.  Please get back to us if they don't help.

--

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml