Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.34k stars 699 forks source link

Fails to download clamav database. certificate errors #969

Open vsawant1608 opened 1 year ago

vsawant1608 commented 1 year ago

Describe the bug

Getting ssl errors when trying to build the container

Socket for clamd not found yet, retrying (14/1800) ...WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-26894.cdiff from https://database.clamav.net/daily-26894.cdiff
Downloading database patch # 26894...
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-26894.cdiff from https://database.clamav.net/daily-26894.cdiff
Downloading database patch # 26894...
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-26894.cdiff from https://database.clamav.net/daily-26894.cdiff
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Trying again in 5 secs...
Socket for clamd not found yet, retrying (19/1800) ...daily database available for update (local version: 26893, remote version: 26959)
Current database is 66 versions behind.
Downloading database patch # 26894...
Socket for clamd not found yet, retrying (31/1800) ...Wed Jul  5 05:06:08 2023 -> Limits: Global time limit set to 120000 milliseconds

How to reproduce the problem

podman pull clamav/clamav:1.1 podman run -itd clamav/clamav:1.1

Replace this text with specific steps needed to reproduce the issue.

Replace this text with the output from the ClamAV command: clamconf -n

Attachments

If applicable, add screenshots to help explain your problem.

If the issue is reproducible only when scanning a specific file, attach it to the ticket.

micahsnyder commented 1 year ago

I have only tested this with docker and not podman. But I cannot reproduce this issue.

Is it possible you have some firewall setting in your network that is preventing the downloads?