Re: Freshclam certificate verification failing on Windows

On 10/10/2025 14:02, Steve Basford wrote:
> On 10 October 2025 11:47:04 Paul Smith* via clamav-users 
> <[email protected]> wrote:
>
>> Since upgrading to ClamAV 1.4.3, we're having trouble with Freshclam on
>> Windows failing to download definitions with this error
>>
>> WARNING: Download failed (60) WARNING: Message: SSL peer certificate or
>> SSH remote key was not OK
>>
>
> 1.5.0 is out and has a certs directory included.... does that version 
> work for you?
>
Nope, exactly the same problem

Output of 'freshclam -v' on fresh (but fully updated) Windows 11
========================================================

Current working dir is c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\
Querying current.cvd.clamav.net
TTL: 0
fc_dns_query_update_info: Software version from DNS: 1.0.9
Current working dir is c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\
check_for_new_database_version: No local copy of "daily" database.
query_remote_database_version: daily.cvd version from DNS: 27788
daily database available for download (remote version: 27788)
Retrieving https://database.clamav.net/daily.cvd
downloadFile: Download source: https://database.clamav.net/daily.cvd
downloadFile: Download destination: 
c:\clamav-1.5.0.win.x64\clamav-1.5.0.win.x64\db\tmp.5fecc1334d\daily.cvd
* Host database.clamav.net:443 was resolved.
* IPv6: (none)
* IPv4: 104.17.196.15, 104.18.203.90
*   Trying 104.17.196.15:443...
Certificate loaded from Windows certificate store: Microsoft Root 
Certificate Authority
Certificate loaded from Windows certificate store: Thawte Timestamping CA
Certificate loaded from Windows certificate store: Microsoft Root Authority
Certificate loaded from Windows certificate store: Symantec Enterprise 
Mobile Root for Microsoft
Certificate loaded from Windows certificate store: Microsoft Root 
Certificate Authority 2011
Certificate loaded from Windows certificate store: Microsoft 
Authenticode(tm) Root
Certificate loaded from Windows certificate store: Microsoft Root 
Certificate Authority 2010
Certificate loaded from Windows certificate store: Microsoft ECC TS Root 
Certificate Authority 2018
Certificate loaded from Windows certificate store: Microsoft Timestamp Root
Certificate loaded from Windows certificate store: VeriSign Time Stamping CA
Certificate loaded from Windows certificate store: Microsoft ECC Product 
Root Certificate Authority 2018
Certificate loaded from Windows certificate store: Microsoft Time Stamp 
Root Certificate Authority 2014
Certificate loaded from Windows certificate store: DigiCert Global Root G2
Certificate loaded from Windows certificate store: DigiCert Baltimore Root
Certificate loaded from Windows certificate store: Sectigo (AAA)
Certificate loaded from Windows certificate store: ISRG Root X1
Certificate loaded from Windows certificate store: DigiCert
Certificate loaded from Windows certificate store: DigiCert Global Root G3
Certificate loaded from Windows certificate store: VeriSign Class 3 
Public Primary CA
Certificate loaded from Windows certificate store: Sectigo
* ALPN: curl offers h2,http/1.1
* SSL certificate problem: unable to get local issuer certificate
* closing connection #0
WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or 
SSH remote key was not OK



Paul

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat