From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1592145871; bh=rdjlSsciW+XSGToRU4s0PwXjuKEwDsrbqrtyeaDAj6A=; h=Subject:From:To:Date:Message-ID; b=ONrXVYiBf+LHdfD5K9wzIYfki2G0JWMwff1CYRfIhXZwR6HQIQn7kCTGVotDGlJrf LK2MqtzeZHj9dXwzoirYHTr79MDSDOWb5uD89fMgos+Ev0ksXv/N01B/VrTkfGy8Id TrTGFIu+lwamRh1OU9lb66qFb1fYFXxASUyh6h5s= Authentication-Results: mxback19o.mail.yandex.net; dkim=pass header.i=@yandex.ru To: ALT Linux Community general discussions From: Vladimir Karpinsky Message-ID: <047c49e3-dec6-5b9b-3fc7-479584f11de0@yandex.ru> Date: Sun, 14 Jun 2020 17:44:30 +0300 User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: Russian-English Content-Transfer-Encoding: 8bit Subject: [Comm] freshclam X-BeenThere: community@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Community general discussions List-Id: ALT Linux Community general discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jun 2020 14:44:35 -0000 Archived-At: List-Archive: List-Post: Добрый день! После недавнего обновления ежедневно в 16:33 (уже 3 раза) стал получать письма от Cron'а, запускающего freshclam: $ cat /etc/cron.d/clamav-freshclam 33 * * * * root /usr/bin/freshclam --quiet --daemon-notify Вопросы: 1. Насколько я понял, ключевая фраза из письма: "old SSL session ID is stale, removing" (полный текст см. ниже). Почему, что делать, кто виноват? 2. Почему именно в 16:33? В другие часы всё проходит молча. Может что-то именно в это время происходит с базой, и имеет смысл запускать реже (*/2, */4,...). Содержание письма: * Trying 104.16.218.84:443... * TCP_NODELAY set * Connected to database.clamav.net (104.16.218.84) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /usr/share/ca-certificates/ca-bundle.crt CApath: none * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=CA; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com * start date: Apr 6 00:00:00 2020 GMT * expire date: Oct 9 12:00:00 2020 GMT * subjectAltName: host "database.clamav.net" matched cert's "database.clamav.net" * issuer: C=US; ST=CA; L=San Francisco; O=CloudFlare, Inc.; CN=CloudFlare Inc ECC CA-2 * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x8c508d0) > GET /daily-25843.cdiff HTTP/2 Host: database.clamav.net User-Agent: ClamAV/0.102.3 (OS: linux-gnu, ARCH: i386, CPU: i586) Accept: */* Connection: close * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 256)! < HTTP/2 200 < date: Sun, 14 Jun 2020 13:33:07 GMT < content-type: application/octet-stream < content-length: 160368 < set-cookie: __cfduid=d5a833db656f0e68a3db8d5ea1d6d25e01592141587; expires=Tue, 14-Jul-20 13:33:07 GMT; path=/; domain=.clamav.net; HttpOnly; SameSite=Lax < last-modified: Sun, 14 Jun 2020 12:53:00 GMT < etag: "5ee61dac-27270" < expires: Mon, 14 Jun 2021 13:26:42 GMT < cache-control: public, max-age=31535615 < cf-cache-status: HIT < age: 2021 < accept-ranges: bytes < cf-request-id: 0354a1bc510000d8f5b5b9c200000001 < expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" < strict-transport-security: max-age=15552000 < x-content-type-options: nosniff < server: cloudflare < cf-ray: 5a346bda1b80d8f5-AMS < * Connection #0 to host database.clamav.net left intact -- С уважением, Владимир.