Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on July 22, 2015, 09:32:35 AM

Title: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 22, 2015, 09:32:35 AM
Hi,

I just did a fresh install of Win XP Pro 32 bit, SP2 on a PC where all partitions where removed and recreated prior to installation. After installing Avast Free 10.3.2223 it blocks all internet sites with a message that the certifikate is invalid.

Even sites like microsoft.com, google.com and avast.com

Browsers tested ie and Firefox 39.0

Title: Re: Blocking all stites - "Certifikate not valid"
Post by: mikaelrask on July 22, 2015, 01:06:18 PM
hey and welcome to the avast forum. im using the latest avst i have no poblem with this at all. but i can be something with the new added feture in the latest build that gives you problem (stremfilter) you can try to disable it throught the add/remove program uninstall avast and add/remove compontet from avast. did this solve the problem?

second you should consider upgrade windows xp to win 7,8, or 8.1 seens there is no support from windows xp anymore.  ans sp3 forxp been out for years  ;)
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 22, 2015, 04:31:46 PM
There was another topic similar to this (possibly not identical) and they found that their system date wasn't correct (very old) which would invalidate any security certificate.

It would be worth a try check the system date day/month/year and adjust if required.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 23, 2015, 09:01:34 AM
I don't find any module called "Stremfilter" or "streamfilter" to add or remove when i modify the installation.

This is an old 32bit PC that i brought to life to use as a printer server to a Minolta Color laser where no 64 bit drivers are available, i have a lot of color casettes left and want to keep it alive as long as i have casettes.

The DVD i have for XP is SP2, Microsoft have stopped support, and even windows update, for XP so i can't get any updates including SP3.

Probably have to try another anti virus for this PC...


hey and welcome to the avast forum. im using the latest avst i have no poblem with this at all. but i can be something with the new added feture in the latest build that gives you problem (stremfilter) you can try to disable it throught the add/remove program uninstall avast and add/remove compontet from avast. did this solve the problem?

second you should consider upgrade windows xp to win 7,8, or 8.1 seens there is no support from windows xp anymore.  ans sp3 forxp been out for years  ;)
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: Asyn on July 23, 2015, 09:11:49 AM
Workaround: Disable HTTPS-Scanning in the web shield.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 23, 2015, 09:38:13 AM
I  am also getting this problem, no web access whatsoever ( Firefox and Chrome )and also blocking email ( Pegasus Mail )
This started a few hours ago so I have removed and re-installed Avast 2015 by restarting the computer in safe mode, running AvastClear.exe, and re-installing the Avast direct from the avast server. the problem persists.
I am also running Win XP sp2 , as are the two other machines on my network, and have no problem with those as I hav'nt updated avast on those and don't intend to until this problem is resolved.

Fault description:
Webaccess blocked because certificate is invalid , the names are mostlyavast
 preceeded with a *

example error reports...
"Avast Web Shield has blocked access to this page because the following certificate is invalid *.google.com " when accessing Google UK
"Avast Web Shield has blocked access to this page because the following certificate is invalid *.mathtag.com " when accessing Ebay.co.uk
"Avast Web Shield has blocked access to this page because the following certificate is invalid www.avast.com " when accessing https://www.avast.com

"Mail shield security exclusion " when trying to use Pegasus Mail to access one.com pop3 server the certificate information says
"issued to *.one.com"
"Issued by COMODO RSA Organisation Validation Secure Server CA"
"Valid From 09/04/2014 to 09/04/2017"

If I disable Avast for 10 mins everything functions as it should.

as noted above, this only started after updating the Avast 2015 program.

any help appreciated.



Title: Re: Blocking all stites - "Certifikate not valid"
Post by: vojtech on July 23, 2015, 02:42:50 PM
Please send me the log files StreamFilter.log and Mail.log from avast log folder (C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log).
Thanks.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 23, 2015, 03:59:41 PM
Avast has become unusable. If I want to look at anything with any web browser I must disable Avast.
This is on two different computers.  We better Not update Avast on the last computer.
Keep getting the "Certificate not valid" on all sites including Avast, Google and even our Church website.
I know that our Church keeps the "Certificates" current....

Title: Re: Blocking all stites - "Certifikate not valid"
Post by: Mike23 on July 23, 2015, 06:05:16 PM
 
Quote
...... so i can't get any updates including SP3.
tomme,
SP3 is available here...& has been for years.
> http://windows.microsoft.com/en-us/windows/service-packs-download#sptabs=xp

Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 23, 2015, 06:40:09 PM
Please send me the log files StreamFilter.log and Mail.log from avast log folder (C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log).
Thanks.
I would if I could, no reply option was presented. how about a valid email address. I have the files requested waiting on my desktop
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 23, 2015, 08:39:07 PM
Please send me the log files StreamFilter.log and Mail.log from avast log folder (C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log).
Thanks.
I would if I could, no reply option was presented. how about a valid email address. I have the files requested waiting on my desktop

In the information to the left of the post is an email icon (see attached image, click to expand), when you click on that icon it should open an email style interface.

Click on that email address and it should open your email program and the recipient address already filled in. You can then attach your logs to that email and send it/them.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 24, 2015, 06:15:01 AM
I see if this could be cause of SSL scanning. Try turning off that and see if you face any issues.

check the image below. its under setting . avast protection ---> web sheild
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: davexnet on July 24, 2015, 06:16:16 PM
I thought HTTPS scanning wasn't even an option for XP ?
Al least in 2015.10.2.2218.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 24, 2015, 06:30:30 PM
I thought HTTPS scanning wasn't even an option for XP ?
Al least in 2015.10.2.2218.

Previously it wasn't an option, but it has been for a while.

EDIT: In the previous beta testing and the 10.3.2223 R3 release.
https://www.avast.com/en-gb/release-history (https://www.avast.com/en-gb/release-history)
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: davexnet on July 24, 2015, 07:01:27 PM
Thanks DavidR,
I'm still on 2218.  I'm going to do a clean install of the latest release on my XP
box and check it out.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 24, 2015, 08:55:19 PM
Thanks DavidR,
I'm still on 2218.  I'm going to do a clean install of the latest release on my XP
box and check it out.

You're welcome,

I don't know if you have used the beta builds in the past, but there is a new one 10.3.2224, https://forum.avast.com/index.php?topic=174079.0 (https://forum.avast.com/index.php?topic=174079.0).

I don't know if there is anything specific in there relating to this issue, though I didn't have this problem on this XP Pro SP3 system.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 25, 2015, 01:32:40 AM
I have also been having this problem.  I had to install the prior avast version to get browsing to work in firefox.  it did not seem to block https sites in ie.   I tried using avastclear and reinstalling the latest version but that did not work.    when I was using the latest version I could browse sites if webshield was disabled.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 25, 2015, 02:15:38 PM
I have also been having this problem.  I had to install the prior avast version to get browsing to work in firefox.  it did not seem to block https sites in ie.   I tried using avastclear and reinstalling the latest version but that did not work.    when I was using the latest version I could browse sites if webshield was disabled.

You don't give any information on your OS or avast version and build number ?
Since this appears to be XP related, your system info might help.

Previous versions of avast, prior to avast 10.3.2223 didn't have support for https scanning in XP and Vista.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 25, 2015, 03:34:21 PM
I have also been having this problem.  I had to install the prior avast version to get browsing to work in firefox.  it did not seem to block https sites in ie.   I tried using avastclear and reinstalling the latest version but that did not work.    when I was using the latest version I could browse sites if webshield was disabled.
I am using windows xp pro 64bit sp2 the version that is working is 2115.10.2.2215
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: DavidR on July 25, 2015, 04:20:32 PM
I have also been having this problem.  I had to install the prior avast version to get browsing to work in firefox.  it did not seem to block https sites in ie.   I tried using avastclear and reinstalling the latest version but that did not work.    when I was using the latest version I could browse sites if webshield was disabled.
I am using windows xp pro 64bit sp2 the version that is working is 2015.10.2.2215

In theory 2015.10.2.2218 should work also as isn't R3 2015.3.222x build.

Interesting that your XP Pro is 64bit, I wonder if others experiencing this are also using XP Pro 64bit, as I don't have the issue with XP Pro SP3 32bit.
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on July 26, 2015, 03:55:23 PM
It is not likely they are using the 64bit version, I think the issue is with firefox, because it did not seem to happen in ie, but I only use firefox.  i am also using peerblock 1.2
Title: Re: Blocking all stites - "Certifikate not valid"
Post by: REDACTED on August 01, 2015, 02:22:33 AM
Hi!

It appears that new version of Avast is using a certificate with SHA256 hash algorithm for Web/Mail Shield protection. Unfortunately Windows XP SP2 doesn't support that algorithm, Microsoft made it available in SP3 (see here (https://support.globalsign.com/customer/portal/articles/1499561-sha-256-compatibility#1d) - section "Detailed Operating System Support").

Regards