[arch-general] PKGBUILD - clamav 0.103.4 - source .tar.gz downloads fine, .tar.gz.sig is 403? (same with Arch package)

[David C. Rankin]

On 11/20/21 1:06 AM, Ralf Mardorf via arch-general wrote:
> 2. ####
> 
> If I copy the clamav signature link from a Firefox download, then wget works:
> 
> [rocketmouse at archlinux test]$ wget "https://clamav-site.s3.amazonaws.com/production/release_files/files/000/000/698/original/clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab037986bff7d0a97bd212c85cdec3c9825aca5c03ffc81e076872471f3"
> The destination name is too long (292), reducing to 236
> --2021-11-20 07:39:05--  https://clamav-site.s3.amazonaws.com/production/release_files/files/000/000/698/original/clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab037986bff7d0a97bd212c85cdec3c9825aca5c03ffc81e076872471f3
> SSL_INIT
> Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
> Resolving clamav-site.s3.amazonaws.com (clamav-site.s3.amazonaws.com)... 52.217.38.156
> Connecting to clamav-site.s3.amazonaws.com (clamav-site.s3.amazonaws.com)|52.217.38.156|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 801 []
> Saving to: ‘clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMGOEV4EFM%2F20211120%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20211120T063226Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=33b8bab0’
> 
> clamav-0.103.4.tar.gz.sig?X-Amz-Algorithm=AWS4- 100%[======================================================================================================>]     801  --.-KB/s    in 0s      

Holy Cow!

  Thank you Ralf. I too downloaded in FF to build clamav, but I didn't go back
and see what FF actually used as when I went to the site the status-bar url
was the same as I was trying to download in source=(...).

  So the PKGBUILD source=(...) seems to be choking on some internal redirect
at the clamav site that is actually some clamav-site.s3.amazonaws.com site.?.?

  I asked about this problem on the clamav IRC (well the discord thing that
replaced IRC), and they don't seem to know anything about the redirect issue.

  Is there any standard "short-url" conversion magic that can be used when
this sort of thing crops up? At least from my network, I can't even use the
current Arch clamav source to build due to this problem.

-- 
David C. Rankin, J.D.,P.E.