[Eisfair] freshclam sucht nach /etc/certs

[Peter Bäumer]

Am 09.11.2025 um 18:00 schrieb Holger Bruenjes:
> Hallo Gerd
> 
> Am 09.11.25 um 17:48 schrieb Gerd:
> 
>> Detlef Paschke <schabau at t-online.de> Schrieb in der Nachricht:r
>>> Am 08.11.2025 um 16:00 schrieb Gerd:> Hallo,Hallo,> nach heutigen update läuft clamav nicht mehr.> freshclam sucht nach /etc/certsals Notlösung kannst du ein leeres Verzeichnis /etc/certs erstellen.Dann funktioniert es erst mal wieder.Es gab dazu auch eine Information im Blog, was aber offensichtlich imClamAV Eisfair Paket nicht berücksichtigt wurde.https://blog.clamav.net/2025/08/
>>
>> Damit werden die Definitionsdateien zwar geladen, aber nicht
>>   verifiziert und der clamd startet deswegen auch nicht.
> 
> Auf Pack-Eis ist die vor Version wieder verfuegbar
> 

downgrade auf die alte Version habe ich jetzt Probleme mit freshclam:

freshclam daemon 1.4.3 (OS: Linux, ARCH: x86_64, CPU: x86_64)
ClamAV update process started at Mon Nov 10 05:33:45 2025
daily database available for update (local version: 27769, remote version: 27817)
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Incremental update failed, trying to download daily.cvd
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Trying again in 5 secs...
daily database available for update (local version: 27769, remote version: 27817)
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
.
.
.
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK
WARNING: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
ERROR: Download failed (60) ERROR:  Message: SSL peer certificate or SSH remote key was not OK
ERROR: downloadPatch: Can't download daily-27770.cdiff from https://database.clamav.net/daily-27770.cdiff
WARNING: Incremental update failed, trying to download daily.cvd
ERROR: Download failed (60) ERROR:  Message: SSL peer certificate or SSH remote key was not OK
ERROR: Can't download daily.cvd from https://database.clamav.net/daily.cvd
Giving up on https://database.clamav.net...
ERROR: Update failed for database: daily
ERROR: Database update process failed: Connection failed
ERROR: Update failed.
--------------------------------------
Update process terminated
--------------------------------------



Aus dem Menü (Get new virus definitions) / von der Konsole kommen diese Meldungen:

/usr/bin/freshclam  --log=/var/log/clam-update.log
ERROR: Failed to lock the log file /var/log/clam-update.log: Resource temporarily unavailable
ERROR: Problem with internal logger (UpdateLogFile = /var/log/clam-update.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!


Ohne die Angabe --log=/var/log/clam-update.log, geht es dann von der Konsole:

  /usr/bin/freshclam
ClamAV update process started at Mon Nov 10 05:53:34 2025
daily database available for update (local version: 27769, remote version: 27817)
Current database is 48 versions behind.
Downloading database patch # 27770...
Time:    0.2s, ETA:    0.0s [========================>]       780B/780B
Downloading database patch # 27771...
Time:    0.1s, ETA:    0.0s [========================>]       780B/780B
.
.
.
Time:    0.1s, ETA:    0.0s [========================>]    1.38KiB/1.38KiB
Downloading database patch # 27817...
Time:    0.1s, ETA:    0.0s [========================>]    3.98KiB/3.98KiB
Testing database: '/usr/share/clamav/tmp.cebbed25d2/clamav-3784cd88c6145d93417da84bce327d48.tmp-daily.cld' ...
Database test passed.
daily.cld updated (version: 27817, sigs: 2077007, f-level: 90, builder: svc.clamav-publisher)
main.cld database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
bytecode.cld database is up-to-date (version: 339, sigs: 80, f-level: 90, builder: nrandolp)


Gibt man freshclam einen neuen log File (mit passender Berechtigung)an, geht es auch...

/usr/bin/freshclam  --log=/var/log/clam-update_test.log
ClamAV update process started at Mon Nov 10 05:59:33 2025
daily.cld database is up-to-date (version: 27817, sigs: 2077007, f-level: 90, builder: svc.clamav-publisher)
main.cld database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
bytecode.cld database is up-to-date (version: 339, sigs: 80, f-level: 90, builder: nrandolp)


> Holger
> 

MfG
   Peter B.