Combined answer to "J.R." and "Andrew Watkins":
That pointed me at a few things, first, I updated some tools.
I am now using OpenSSL 1.1.1d, bzip2 1.0.8, curl 7.67.0, and GCC 9.1.0.
Configured thusly:
env CONFIG_SHELL=/bin/bash \
/bin/bash ./configure \
CONFIG_SHELL=/bin/bash \
LDFLAGS=-R/opt/local/lib \
--enable-unrar \
--disable-ipv6 \
--disable-silent-rules \
--disable-check \
--with-openssl=/opt/local \
--with-libbz2-prefix=/opt/local \
--with-libcurl=/opt/local \
--prefix=/opt/local
Now, I get the following:
=================================================================
Mon Dec 2 14:58:54 2019 -> ClamAV update process started at Mon Dec 2
14:58:54 2019
Mon Dec 2 14:58:54 2019 -> *Current working dir is
/home/grs/src/clamav-0.102.1/NEW/
Mon Dec 2 14:58:54 2019 -> *Querying current.cvd.clamav.net
Mon Dec 2 14:58:54 2019 -> *TTL: 993
Mon Dec 2 14:58:54 2019 -> *fc_dns_query_update_info: Software version
from DNS: 0.102.1
Mon Dec 2 14:58:54 2019 -> *Current working dir is
/home/grs/src/clamav-0.102.1/NEW/
Mon Dec 2 14:58:54 2019 -> *check_for_new_database_version: No local
copy of "daily" database.
Mon Dec 2 14:58:54 2019 -> *query_remote_database_version: daily.cvd
version from DNS: 25650
Mon Dec 2 14:58:54 2019 -> daily database available for download
(remote version: 25650)
Mon Dec 2 14:58:54 2019 -> *Retrieving
https://database.clamav.net/daily.cvd
Mon Dec 2 14:58:54 2019 -> *downloadFile: Download source:
https://database.clamav.net/daily.cvd
Mon Dec 2 14:58:54 2019 -> *downloadFile: Download destination:
/home/grs/src/clamav-0.102.1/NEW/tmp/clamav-d7fb545c18f86fcdc39d1bdb45d124e1.tmp
* Trying 104.16.219.84:443...
* TCP_NODELAY set
* Connected to database.clamav.net (104.16.219.84) port 443 (#0)
* ALPN, offering http/1.1
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
...
repeats a couple of times
...
=================================================================
Stepping through the code gets to "curl_easy_perform()," which then
throws the error.
Google "SSL certificate problem: unable to get local issuer certificate"
points me at not having new enough root certificate(s).
"wget https://database.clamav.net/daily.cvd"; works, dammit!
Q'n'D "cd /opt/local/etc ; ln -s /etc/certs ." didn't fix it.
New root certificates needed?
Or may be cURL isn't finding them??
Might build a debug libcurl... :->
Cheers,
Gary B-)
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
