Avast WEBforum

Avast Products => Avast Mac Security => Topic started by: mcsween on October 03, 2017, 06:16:18 PM

Title: iCloud Login Blocked by Avast in High Sierra
Post by: mcsween on October 03, 2017, 06:16:18 PM
When Avast's Web Shield is activated, I cannot login to iCloud with Safari with the error "There was an error connecting to the Apple ID server."

As soon as I disable the Web Shield, I can log in.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: .: Mac :. on October 03, 2017, 09:33:43 PM
Are you saying that going to iCloud.com services is blocked? Or logging in somewhere in system preferences?

I verified the ability to login in MacOS 10.11 and MacOS 10.12 in Safari with Web Shield running and did not get the error.

Can you give us your MacOS and Safari Version? Click Apple then About this Mac to get the MacOS Version, and in Safari click Safari and then About Safari.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: mcsween on October 04, 2017, 12:24:13 AM
Safari is 11.0 build 13604.1.38.1.6 and MacOS is 10.13.  With web shield enabled, I get the following message:
(https://i.imgur.com/fQmfc2x.png)
Connection Error - iCloud encountered an error while trying to connect to server.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: lukas.hasik on October 05, 2017, 02:47:06 PM
just to be sure - Avast Security 12.9, right?

Safari is 11.0 build 13604.1.38.1.6 and MacOS is 10.13.  With web shield enabled, I get the following message:
(https://i.imgur.com/fQmfc2x.png)
Connection Error - iCloud encountered an error while trying to connect to server.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: peru68 on October 05, 2017, 08:27:09 PM
I have the same problem and I have avast 12.9 with macOS 10.13
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: mcsween on October 06, 2017, 04:49:21 AM
Yes Avast 12.9.  I also uninstalled and reinstalled but have the same problem
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on October 13, 2017, 05:00:46 PM
This will be fixed in the next version of Avast. A current workaround is to disable the web shield while accessing icloud.com.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: .: Mac :. on October 13, 2017, 11:27:56 PM
Thanks for the update Ondrej!
Title: [FIXED] Re: iCloud Login Blocked by Avast in High Sierra
Post by: lukas.hasik on December 08, 2017, 09:07:58 AM
just for record - fixed in release 13.0. If you are with older release go to - Preferences > Updates > and click the 2nd Update Now button (Program)
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on December 13, 2017, 09:52:02 AM
Hello,
unfortunately the newest iteration of HighSierra broke our fix of this issue yet again.

If it is happening to you, please run the terminal app and in it run the two following commands:

sudo sh -c "echo '*.icloud.com https' >> /Library/Application\ Support/Avast/config/com.avast.proxy.excl"
sudo killall -hup com.avast.proxy

Please note that it will prompt you for a password. After that, restart Safari and all should be fine.

This should help until we manage to get a fix out.
Kind regards,
Ondrej Kolacek
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: PoCoMotion on December 16, 2017, 11:29:10 PM
the workaround while keeping Avast active using Safari:
1. click on support when you get the error
2. select your country
3. select to login to iCloud on the web

Other workaround - use Firefox.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: lukas.hasik on December 20, 2017, 04:39:15 PM
this issue should be fixed with the recent 13.4 release. Click Preferences > Updates > Program : Update Now to force the update manually.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: Tech34 on March 13, 2018, 04:05:55 PM
Having the same issue but with Avast for Business version 13.5. Currently running High Sierra 10.13.3. Issue only occurs with the Safari browser when trying to access iCloud.com. As soon as the Web Shield is disabled it works just fine. Any ETA when this will be fixed?
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on March 16, 2018, 05:04:10 PM
Having the same issue but with Avast for Business version 13.5. Currently running High Sierra 10.13.3. Issue only occurs with the Safari browser when trying to access iCloud.com. As soon as the Web Shield is disabled it works just fine. Any ETA when this will be fixed?
Hello,
it should not happen in that configuration. Please can you check
-that in Avast GUI, Preferences, WebShield settings, in excluded servers list, there is *.icloud.com exclusion for https
-that when you browse icloud.com, in the navigation bar, when you click on icon of lock, click Show Certificates, in the list of certificates there is no "Avast trusted CA" certificate in the list?
Kind regards,
Ondrej Kolacek
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: .: Mac :. on March 17, 2018, 04:11:14 PM
Ondrej,

What is the root issue here? Is this something apple is doing detecting the man in th emiddle nature of the web shield proxy?
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on March 19, 2018, 04:39:02 PM
Ondrej,

What is the root issue here? Is this something apple is doing detecting the man in th emiddle nature of the web shield proxy?
Hello,

It is hard to be sure, but when I encountered this issue for the first time, the only hint I have found was from logs that Safari was using some "more secure verification". I suspect they do not use the normal verification against the keychain but they either limit the allowed root certificates (while not using our certificate in the list) or do some additional verification (which exposes the man in the middle). At least this is what I would do if I wanted to make the page "more secure". Excepting the host seemed like the only sane thing to do in this case, but I was trying to make it the narrowest possible which was not a good idea as subsequent update widened the necessary exception. But now it should be fine, and for me it works on the same OS version.

Kind regards,
Ondrej Kolacek
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: .: Mac :. on March 24, 2018, 02:18:33 AM
Thanks Ondrej, leave it to apple to try some quirky things
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: CHA05 R31GN5 on April 03, 2018, 02:54:05 AM
Yeah, quirky. Because Apple couldn't afford nor has the better software engineers than avast!; right? /s As far as I'm aware, avast! is writing software for an OS, not the other way around. This includes Windows, Linux, or any other UNIX-like or BSD derivatives. Just chiming in because of Apple's quirkiness. avast! decided that their web scanner should block iCloud Photo Library syncing. Disable the real-time scanners and, wouldn't you know, the iCloud Photos Library began syncing and had retrieved approximately 1k photos in about 1-2 minutes. I've been having this problem since 10.13.3. I'm going to completely remove the software and attempt another clean install. However, if it doesn't resolve then I'll try other antivirus software. I'll report back if the problem is non-existent.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: CHA05 R31GN5 on April 03, 2018, 03:54:36 PM
 :) The problem appears to be resolved for me on macOS 10.13.4. I uninstalled avast! through the recommended uninstall routine, searched and removed files/folders related to avast!, and reinstalled. After a reboot, a clean installation of version 13.5.5a59486c66bc still required another reboot for avast! scanners to not block/inhibit particular network packets. This has been the norm for me since macOS 10.12 but it appears that avast! scanners are not blocking iCloud Photos Library syncing now. I'll report back or post with any problems, if they occur, in the future.
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on April 10, 2018, 09:45:07 AM
Hello,
since the icloud.com webpage is constantly changing internally, we had to fix the issue again; however we are working on a solution that should prevent these issues from reappearing.
Kind regards,
Ondrej Kolacek
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: .: Mac :. on April 13, 2018, 02:43:02 PM
Ondrej,

If you would, please post an update here on the forum when you guys have a permanent fix with the version its included in so we can let everyone know who is having this issue.

Mac
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: ondrej.kolacek on April 16, 2018, 10:22:32 AM
Ondrej,

If you would, please post an update here on the forum when you guys have a permanent fix with the version its included in so we can let everyone know who is having this issue.

Mac

Hi,
unfortunately the framework needed to solve this more permanently won't get into the next version as it is quite complex and there is not enough time to sufficiently test it in the little remaining time. We are working on having the page monitored periodically so that we can fix issues as they come in the meantime.
Kind regards,
Ondrej Kolacek
Title: Re: iCloud Login Blocked by Avast in High Sierra
Post by: BrianCSC on April 18, 2018, 01:25:14 AM
Whenever you get it sorted out, I'd love to hear about it. Been dogged by this issue for a long time now. Mac OS 10.13.4, Avast 13.5 (5a59486c66bc). I can't do anything at the App store, or even listen to a song in iTunes without disabling web shield, let alone use iCloud anything.