On 10/10/2025 14:02, Steve Basford wrote:
On 10 October 2025 11:47:04 Paul Smith* via clamav-users
<[email protected]> wrote:
Since upgrading to ClamAV 1.4.3, we're having trouble with Freshclam on
Windows failing to download definitions with this error
WARNING: Download failed (60) WARNING: Message: SSL peer certificate or
SSH remote key was not OK
1.5.0 is out and has a certs directory included.... does that version
work for you?
Nope, exactly the same problem
Output of 'freshclam -v' on fresh (but fully updated) Windows 11
========================================================
Current working dir is c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\
Querying current.cvd.clamav.net
TTL: 0
fc_dns_query_update_info: Software version from DNS: 1.0.9
Current working dir is c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\
check_for_new_database_version: No local copy of "daily" database.
query_remote_database_version: daily.cvd version from DNS: 27788
daily database available for download (remote version: 27788)
Retrieving https://database.clamav.net/daily.cvd
downloadFile: Download source: https://database.clamav.net/daily.cvd
downloadFile: Download destination:
c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\tmp.5fecc1334d\daily.cvd
* Host database.clamav.net:443 was resolved.
* IPv6: (none)
* IPv4: 104.17.196.15, 104.18.203.90
* Trying 104.17.196.15:443...
Certificate loaded from Windows certificate store: Microsoft Root
Certificate Authority
Certificate loaded from Windows certificate store: Thawte Timestamping CA
Certificate loaded from Windows certificate store: Microsoft Root Authority
Certificate loaded from Windows certificate store: Symantec Enterprise
Mobile Root for Microsoft
Certificate loaded from Windows certificate store: Microsoft Root
Certificate Authority 2011
Certificate loaded from Windows certificate store: Microsoft
Authenticode(tm) Root
Certificate loaded from Windows certificate store: Microsoft Root
Certificate Authority 2010
Certificate loaded from Windows certificate store: Microsoft ECC TS Root
Certificate Authority 2018
Certificate loaded from Windows certificate store: Microsoft Timestamp Root
Certificate loaded from Windows certificate store: VeriSign Time Stamping CA
Certificate loaded from Windows certificate store: Microsoft ECC Product
Root Certificate Authority 2018
Certificate loaded from Windows certificate store: Microsoft Time Stamp
Root Certificate Authority 2014
Certificate loaded from Windows certificate store: DigiCert Global Root G2
Certificate loaded from Windows certificate store: DigiCert Baltimore Root
Certificate loaded from Windows certificate store: Sectigo (AAA)
Certificate loaded from Windows certificate store: ISRG Root X1
Certificate loaded from Windows certificate store: DigiCert
Certificate loaded from Windows certificate store: DigiCert Global Root G3
Certificate loaded from Windows certificate store: VeriSign Class 3
Public Primary CA
Certificate loaded from Windows certificate store: Sectigo
* ALPN: curl offers h2,http/1.1
* SSL certificate problem: unable to get local issuer certificate
* closing connection #0
WARNING: Download failed (60) WARNING: Message: SSL peer certificate or
SSH remote key was not OK
Paul
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
