On Wed, Sep 25, 2013 at 7:10 AM, ANANT S ATHAVALE <a...@isac.gov.in> wrote:

> Dear List,
>
> I am seeing a new option: DisableCertCheck in clamd.conf in 0.98.
>
> And in configuration file, it is mentioned that, by default, the signature
> chain is checked with database.  Is this database part of main.cvd or
> something else, which gets downloaded with freshclam?
> --
>           Regards
>            Anant


Hey Anant,

Though the feature exists in ClamAV 0.98, we are currently not shipping an
authenticode certificate database. We plan to in the future. Enabling the
DisableCertCheck flag will prevent all certificates from being loaded by
any published CVD, turning the Authenticode checks off.

We are in the process of deciding in which CVD the authenticode
certificates will go.

Thanks,

Shawn
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to