On 11/20/21 2:54 AM, Andreas Bosch via arch-general wrote:
For some reason clamav blocks the curl user agent for .sig files ... This could be worked around by using a custom user agent for curl like
curl -A makepkg -L "https://www.clamav.net/downloads/production/clamav-0.103.4.tar.gz.sig"
The curl commands in makepkg.conf are not doing that, maybe that should be changed.
The folks at clamav have now fixed the signature redirect problem that caused makepkg (curl) to fail to download the .sig file for 0.103.4. (micah_s and sfirefench on discord). I suspect most of the problems like this are due to incorrect configurations for the redirects from the package site to wherever the actual file lives on a cloud service provider host. At least here, a quick post to the upstream site was able to get this resolved. Foreseeable growing pains that are the side-effect of giving up control of where you data actually lives... -- David C. Rankin, J.D.,P.E.