Mailing List Archive

Hi Artem,

Yes, freshclam does verify the signatures, and you can verify with sigtool --info.

Thanks,
Andy

________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Artem via clamav-users <clamav-users@lists.clamav.net>
Sent: Wednesday, June 10, 2020 10:02 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: Artem <temad80@gmail.com>
Subject: [clamav-users] Digital signature verification when updating the virus database

Hello,
As it is written in the documentation CVD is a digitally signed container that includes signature databases in various text formats.
Manually we can verify digital signature using "sigtool --info". Correct me if I am wrong.
And second question: Does freshclam automatically verify the digital signature when updating the virus database?

Regards, Artem

Hi Andy,


Your answers help me a lot.


Many thanks,
Artem.

??, 12 ???. 2020 ?. ? 18:15, Andy Ragusa (aragusa) <aragusa@cisco.com>:

> Hi Artem,
>
> Yes, freshclam does verify the signatures, and you can verify with sigtool
> --info.
>
> Thanks,
> Andy
>
> ------------------------------
> *From:* clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of
> Artem via clamav-users <clamav-users@lists.clamav.net>
> *Sent:* Wednesday, June 10, 2020 10:02 AM
> *To:* clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
> *Cc:* Artem <temad80@gmail.com>
> *Subject:* [clamav-users] Digital signature verification when updating
> the virus database
>
> Hello,
> As it is written in the documentation CVD is a digitally signed container
> that includes signature databases in various text formats.
> Manually we can verify digital signature using "sigtool --info".
> Correct me if I am wrong.
> And second question: Does freshclam automatically verify the digital
> signature when updating the virus database?
>
> Regards, Artem
>