[clamav-users] Certificate error downloading clamav-0.99.2

Discussion:

(too old to reply)

Kristen R

2016-05-11 20:12:11 UTC

List,

Knowing there is a new version of clamav out I have gone to download it.
But I run into an error I think should be made known. Below is the error:

# wget https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz
--2016-05-11 12:08:04--
https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz
Resolving www.clamav.net... 198.41.209.233, 198.41.208.233,
198.41.209.232, ...
Connecting to www.clamav.net|198.41.209.233|:443... connected.
ERROR: certificate common name `ssl392507.cloudflaressl.com' doesn't
match requested host name `www.clamav.net'.
To connect to www.clamav.net insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

Kristen

Yuri Voinov

2016-05-11 20:16:19 UTC

Permalink

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

This is because of clamav is behind CF.

Post by Kristen R
List,
Knowing there is a new version of clamav out I have gone to download it.
# wget https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz
--2016-05-11 12:08:04--
https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz
Resolving www.clamav.net... 198.41.209.233, 198.41.208.233,
198.41.209.232, ...
Connecting to www.clamav.net|198.41.209.233|:443... connected.
ERROR: certificate common name `ssl392507.cloudflaressl.com' doesn't
match requested host name `www.clamav.net'.
To connect to www.clamav.net insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

Wget told you what you must do to download, hm?

Post by Kristen R
Kristen
_______________________________________________
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXM5MTAAoJENNXIZxhPexGHiUIAIpJJIZpkYIZ1tA3g17q2vdR
+QSEpleGA8HQ/HABCSgVnVyS1NoYbq+k/5nCe04eDr7e3WOs40wwucRaYXaONxLS
rlG+knueKKRL+Ohog6Rs3vKnylK7/pn4/PI6HIPbkogO54QA+HtryAcybrFg3BOH
Ysib6Ew6+WIvIf7Gwzdd4fbU1pe8qYkxrDiIlf881zHnUK/01NPUufGywfpWpCzR
CQahnOrXINJHE5ipvCR9nKASoagZlE3Br5Y3LqwzRPyy6u8VbNvjEioyZVh6TKko
s4S/gIPsB4VJguIJN62Js1JL8Xw9T0oA0yjTMgUgFlJc7q5jVpP4bB0Y1+OtFXU=
=3h/j
-----END PGP SIGNATURE-----

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Kristen R

2016-05-11 20:18:37 UTC

Permalink

Post by Yuri Voinov
This is because of clamav is behind CF.

True

Post by Yuri Voinov

Wget told you what you must do to download, hm?

That it did, yes

Post by Yuri Voinov

Post by Kristen R
Kristen

Kristen R

2016-05-11 23:11:21 UTC

Permalink

Also noticed after downloading clamav-0.99.2.tar.gz and checking against
the provided signature file the following:

# gpg --verify clamav-0.99.2.tar.gz.sig clamav-0.99.2.tar
gpg: Signature made Fri 22 Apr 2016 08:25:32 AM AKDT using DSA key ID
260429A0
gpg: BAD signature from "Talos (Talos GPG Key) <***@sourcefire.com>"

How about a SHA of the file we download to verify the file.

Kristen

Jason Englander

2016-05-12 01:40:56 UTC

Permalink

Post by Kristen R
Also noticed after downloading clamav-0.99.2.tar.gz and checking against
# gpg --verify clamav-0.99.2.tar.gz.sig clamav-0.99.2.tar
gpg: Signature made Fri 22 Apr 2016 08:25:32 AM AKDT using DSA key ID
260429A0
How about a SHA of the file we download to verify the file.
Kristen

Try it again without gunzip'ing it.

gpg --verify clamav-0.99.2.tar.gz.sig clamav-0.99.2.tar.gz
or
gpg --verify clamav-0.99.2.tar.gz.sig

Jason

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Kristen R

2016-05-12 01:54:39 UTC

Permalink

Post by Jason Englander

Try it again without gunzip'ing it.
gpg --verify clamav-0.99.2.tar.gz.sig clamav-0.99.2.tar.gz
or
gpg --verify clamav-0.99.2.tar.gz.sig
Jason

That's the answer. I get a good signature now.

Thank you

Kristen