On 11/20/21 2:54 AM, Andreas Bosch via arch-general wrote: > For some reason clamav blocks the curl user agent for .sig files ... > This could be worked around by using a custom user agent for curl like > > curl -A makepkg -L > "https://www.clamav.net/downloads/production/clamav-0.103.4.tar.gz.sig" > > The curl commands in makepkg.conf are not doing that, maybe that should be > changed.
The folks at clamav have now fixed the signature redirect problem that caused makepkg (curl) to fail to download the .sig file for 0.103.4. (micah_s and sfirefench on discord). I suspect most of the problems like this are due to incorrect configurations for the redirects from the package site to wherever the actual file lives on a cloud service provider host. At least here, a quick post to the upstream site was able to get this resolved. Foreseeable growing pains that are the side-effect of giving up control of where you data actually lives... -- David C. Rankin, J.D.,P.E.