[arch-general] PKGBUILD - clamav 0.103.4 - source .tar.gz downloads fine, .tar.gz.sig is 403? (same with Arch package) [SOLVED]

[David C. Rankin]

On 11/20/21 2:54 AM, Andreas Bosch via arch-general wrote:
> For some reason clamav blocks the curl user agent for .sig files ...
> This could be worked around by using a custom user agent for curl like
> 
>     curl -A makepkg -L "https://www.clamav.net/downloads/production/clamav-0.103.4.tar.gz.sig"
> 
> The curl commands in makepkg.conf are not doing that, maybe that should be changed.

The folks at clamav have now fixed the signature redirect problem that caused
makepkg (curl) to fail to download the .sig file for 0.103.4. (micah_s and
sfirefench on discord).

I suspect most of the problems like this are due to incorrect configurations
for the redirects from the package site to wherever the actual file lives on a
cloud service provider host.

At least here, a quick post to the upstream site was able to get this resolved.

Foreseeable growing pains that are the side-effect of giving up control of
where you data actually lives...

-- 
David C. Rankin, J.D.,P.E.