Cisco-Talos ClamAV ported to Haiku!

Begasus · February 16, 2026, 10:03am

it’s been updated not that long ago

Can't verify: Invalid certs directory '/packages/clamav-1.5.1-1/.self/settings/clamav/certs/'

should look into that ….

@zuMi try this for now: freshclam --cvdcertsdir=/system/data/ssl/certs

zuMi · February 16, 2026, 12:32pm

freshclam --cvdcertsdir=/system/data/ssl/certs
ClamAV update process started at Mon Feb 16 13:28:22 2026
daily database available for update (local version: 27835, remote version: 27914)
Current database is 79 versions behind.
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
WARNING: Incremental update failed, trying to download daily.cvd
Time:    2.6s, ETA:    0.0s [========================>]   22.28MiB/22.28MiB
Time:    0.5s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Error verifying signature signed by ["ClamAV_datafiles_release"]: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
[LibClamAV] Invalid digital signature for "/boot/system/settings/clamav/db/tmp.36b5be48d7/daily.cvd": error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
[LibClamAV] Failed to verify "/boot/system/settings/clamav/db/tmp.36b5be48d7/daily.cvd" with "/boot/system/settings/clamav/db/tmp.36b5be48d7/daily-27914.cvd.sign": Signature is invalid: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
[LibClamAV] Detached CVD signature is invalid: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
WARNING: [LibClamAV] CVD verification failed: Error verifying signature: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
daily database available for update (local version: 27835, remote version: 27914)
Current database is 79 versions behind.
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
Downloading database patch # 27836...
WARNING: downloadFile: file not found: https://database.clamav.net/daily-27836.cdiff
WARNING: downloadPatchAndApply: Can't download daily-27836.cdiff from https://database.clamav.net/daily-27836.cdiff
WARNING: Incremental update failed, trying to download daily.cvd
Time:    1.9s, ETA:    0.0s [========================>]   22.28MiB/22.28MiB
ERROR: downloadFile: Can't create new file /boot/system/settings/clamav/db/tmp.36b5be48d7/daily-27914.cvd.sign in /boot/system/settings/clamav/db
Hint: The database directory must be writable for UID 0 or GID 0
Testing database: '/boot/system/settings/clamav/db/tmp.36b5be48d7/daily.cvd' ...
WARNING: Stderr output from database load : WARNING: [LibClamAV] Failed to create a new code-signature verifier: Can't verify: Invalid certs directory '/packages/clamav-1.5.1-1/.self/settings/clamav/certs': No such file or directory (os error -2147459069) [...] ERROR: Failed to load new database: Broken or not a CVD file
WARNING: Database load exited with "Test failed"
ERROR: Database test FAILED.
ERROR: Unexpected error when attempting to update daily: Test failed
ERROR: Database update process failed: Test failed
ERROR: Update failed.

madmax · February 16, 2026, 1:25pm

Just for fun, I installed it and I see /system/settings/clamav/certs/ does not exist, despite package list showing it and package extract extracting it. It (or its file) is not declared as global writable file or anything else, as are the other two files that do exist, may that be the problem, or even that it’s there if it’s not supposed to be changed by the user?

I’ve not been able to test pointing to the extracted dir, though, as I’m rate-limited from the previous tests.

Begasus · February 16, 2026, 2:17pm

Still some issues indeed, will try to point to the system certs in the recipe with “-DCVD_CERTS_DIRECTORY=$(finddir B_SYSTEM_DATA_DIRECTORY)/ssl/certs” …. will come back to it later.

Begasus · February 16, 2026, 4:31pm

OK, did a rebuild, despite the cert file being mentioned it didn’t seem to contain it in the package, cp’d it in there now, also added to global writable files.

Uninstall clamav
I then deleted the clamav directories in /boot/system/settings and /boot/system/packages/administrative/writable-files
Install the newly build package
run freshclam

That worked for me, could you check this package and report back?

https://codeberg.org/Begasus/HaikuTestDrive/raw/branch/master/packages/clamav-1.5.1-2-x86_64.hpkg

Updated earlier, but running freshclam seems to be good now:

~> freshclam 
ClamAV update process started at Mon Feb 16 17:31:14 2026
daily.cvd database is up-to-date (version: 27914, sigs: 355105, f-level: 90, builder: svc.clamav-publisher)
Time:    0.5s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Downloaded missing CVD .sign file daily-27914.cvd.sign
main.cvd database is up-to-date (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)
Time:    0.3s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Downloaded missing CVD .sign file main-63.cvd.sign
bytecode.cvd database is up-to-date (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
Time:    0.3s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Downloaded missing CVD .sign file bytecode-339.cvd.sign

dasouth · February 16, 2026, 7:43pm

this is what I’m seeing

dasouth · February 16, 2026, 10:13pm

Tried changing a few settings, and still receiving verification error even after using a db mirror.

Begasus · February 17, 2026, 6:07am

I just ran “freshclam” here without extras.

The message for local and/or TCP I get also here, I’m guessing those are related to some configuration settings.

EDIT: for the above error comment out the line with TCPSocket 3310 (in /boot/system/clamav/clamd.conf)

Still an error starting clamd:

~> clamd start
Error verifying signature signed by ["ClamAV_datafiles_release"]: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
LibClamAV Warning: Invalid digital signature for "/boot/system/settings/clamav/db/daily.cvd": error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
LibClamAV Warning: Failed to verify "/boot/system/settings/clamav/db/daily.cvd" with "/boot/system/settings/clamav/db/daily-27914.cvd.sign": Signature is invalid: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
LibClamAV Warning: Detached CVD signature is invalid: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
LibClamAV Error: cli_cvdload: Can't verify CVD file /boot/system/settings/clamav/db/daily.cvd: Error verifying signature: error:10800075:PKCS7 routines:PKCS7_verify:certificate verify error:crypto/pkcs7/pk7_smime.c:297:Verify error: self-signed certificate in certificate chain
LibClamAV Error: Can't load /boot/system/settings/clamav/db/daily.cvd: Can't verify database integrity
LibClamAV Error: cli_loaddbdir: error loading database /boot/system/settings/clamav/db/daily.cvd
ERROR: Can't verify database integrity

EDIT2: try using this cert file: https://raw.githubusercontent.com/Cisco-Talos/clamav/refs/heads/main/certs/clamav.crt

EDIT3: looks like that one is working

Begasus · February 17, 2026, 6:59pm

Clamav is rebuilding on buildmasters, should be fixed now (certs directory was not declared as GLOBAL_WRITABLE_FILES).

Some information about freshclam config (haven’t figured it all out, but could launch the daemon from Terminal: Configuration - ClamAV Documentation