Commit 1b55785e2 for clamav.net
commit 1b55785e22a5d435440df759587b8791f49f0f0e
Author: Val S. <valsnyde@cisco.com>
Date: Fri Feb 20 15:48:21 2026 -0500
Freshclam: don't force proxy tunneling (#1664)
Resolves: https://github.com/Cisco-Talos/clamav/issues/179
Thank you to ccamachofg and zerodeux for identifying the solution.
CLAM-2936
diff --git a/libfreshclam/libfreshclam_internal.c b/libfreshclam/libfreshclam_internal.c
index 2873ff8b6..8da451713 100644
--- a/libfreshclam/libfreshclam_internal.c
+++ b/libfreshclam/libfreshclam_internal.c
@@ -720,9 +720,7 @@ static fc_error_t create_curl_handle(
if (CURLE_OK != curl_easy_setopt(curl, CURLOPT_PROXYPORT, g_proxyPort)) {
logg(LOGG_ERROR, "create_curl_handle: Failed to set CURLOPT_PROXYPORT (%u)!\n", g_proxyPort);
}
- if (CURLE_OK != curl_easy_setopt(curl, CURLOPT_HTTPPROXYTUNNEL, 1L)) { // Necessary?
- logg(LOGG_ERROR, "create_curl_handle: Failed to set CURLOPT_HTTPPROXYTUNNEL (1)!\n");
- }
+ /* We do not need to set CURLOPT_HTTPPROXYTUNNEL because Curl handles this automatically */
#ifdef CURLOPT_SUPPRESS_CONNECT_HEADERS
if (CURLE_OK != curl_easy_setopt(curl, CURLOPT_SUPPRESS_CONNECT_HEADERS, 1L)) { // Necessary?
logg(LOGG_ERROR, "create_curl_handle: Failed to set CURLOPT_SUPPRESS_CONNECT_HEADERS (1)!\n");