[arch-general] PKGBUILD - clamav 0.103.4 - source .tar.gz downloads fine, .tar.gz.sig is 403? (same with Arch package)

[Ralf Mardorf]

IIRC it has something to do with network configuration.

On my machine /etc/resolv.conf isn't a link against something systemd
related:

[rocketmouse at archlinux tmp]$ /bin/ls -l /etc/resolv.conf
-rw-r--r-- 1 root root 94 Nov 16 15:44 /etc/resolv.conf

IIRC this might be the culprit.

1. ####

I experienced the same issue with several PKGBUILDs from AUR. An example
from 2018, I needed to change

url="http://search.cpan.org/dist/Goo-Canvas/"

to

url="https://metacpan.org/pod/Goo::Canvas"

and

source=("http://search.cpan.org/CPAN/authors/id/Y/YE/YEWENBIN/Goo-Canvas-$pkgver.tar.gz")

to

source=("https://cpan.metacpan.org/authors/id/Y/YE/YEWENBIN/Goo-Canvas-$pkgver.tar.gz")

to get rid of "403 Forbidden".



2. ####

If I copy the clamav signature link from a Firefox download, then wget works:

[rocketmouse at archlinux test]$ wget "https://clamav-site.s3.amazonaws.com/production/release_files/files/000/000/698/original/clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab037986bff7d0a97bd212c85cdec3c9825aca5c03ffc81e076872471f3"
The destination name is too long (292), reducing to 236
--2021-11-20 07:39:05--  https://clamav-site.s3.amazonaws.com/production/release_files/files/000/000/698/original/clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab037986bff7d0a97bd212c85cdec3c9825aca5c03ffc81e076872471f3
SSL_INIT
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving clamav-site.s3.amazonaws.com (clamav-site.s3.amazonaws.com)... 52.217.38.156
Connecting to clamav-site.s3.amazonaws.com (clamav-site.s3.amazonaws.com)|52.217.38.156|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 801 []
Saving to: ‘clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab0’

clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4- 100%[======================================================================================================>]     801  --.-KB/s    in 0s      

2021-11-20 07:39:05 (7.76 MB/s) - ‘clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab0’ saved [801/801]

[rocketmouse at archlinux test]$ cat clamav-0.103.4.tar.gz.sig\?X-Amz-Algorithm\=AWS4-HMAC-SHA256\&X-Amz-Credential\=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request\&X-Amz-Date\=20211120T063226Z\&X-Amz-Expires\=3600\&X-Amz-SignedHeaders\=host\&X-Amz-Signature\=33b8bab0 
-----BEGIN PGP SIGNATURE-----
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=CJWI
-----END PGP SIGNATURE-----