Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Beta - Avast => Topic started by: ccm582 on August 13, 2022, 10:52:16 AM

Title: No Avast certificates in Chrome and Firefox
Post by: ccm582 on August 13, 2022, 10:52:16 AM
Normally, Avast Free would insert its own certificate for HTTPS scanning into the browser. But it doesn't in Firefox and Chrome browsers but does in Brave browser. Why is this?
Title: Re: No Avast certificates in Chrome and Firefox
Post by: DavidR on August 13, 2022, 02:13:38 PM
Its certainly in my version 103 of Firefox.

That said I'm still using Avast Free version 22.5, you don't say what version of Firefox and Avast you are using.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: ccm582 on August 13, 2022, 04:11:30 PM
Oops, I forgot to mention I'm using latest version of Avast Free Beta 22.8.6028 (build 22.8.7470.734) and latest versions of Chrome and Firefox. I tried repairing and reinstalling but still no Avast Certificate in these browsers but there is in Brave browser.

Web Shield still works even though the Avast Certificate is not installed. I hope the Avast Team can inform us whether not having the Certificate installed in Chrome and Firefox is a bug or intentional.

BTW, restoring Settings do not restore the settings in Do Not Disturb Mode.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: DavidR on August 13, 2022, 05:26:19 PM
I just wonder how easy it would be to get back to the regular release of Avast and see if this is only an issue with the latest beta version.

I did miss that you posted in the Avast Beta sub-forum :)
Title: Re: No Avast certificates in Chrome and Firefox
Post by: ccm582 on August 13, 2022, 06:08:08 PM
I remember when I used the regular release, the Certificate were there. So no need to uninstall and reinstall because Restoring Settings do not restore everything and we have to manually restore some settings which take time.

Best for the developers to either fix it or tell us that they intentionally removed the Avast Certificate from Chrome and Firefox.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: DavidR on August 13, 2022, 07:09:26 PM
I was just trying to confirm this issue was introduced with this beta build.

You can report a bug from the Avast UI:
About Avast, from the Avast tray icon, assuming it is still there in this beta release.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: NON on August 18, 2022, 10:02:46 AM
I believe latest Avast does not use its own certificate for Firefox/Chrome, except for fallback. This is since Avast 2016.

IMPROVED: WebShield HTTPS Scanning - We introduced a new method of HTTPs scanning. It is used in Firefox, Chrome and Opera. It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: DavidR on August 18, 2022, 12:00:12 PM
I believe latest Avast does not use its own certificate for Firefox/Chrome, except for fallback. This is since Avast 2016.

IMPROVED: WebShield HTTPS Scanning - We introduced a new method of HTTPs scanning. It is used in Firefox, Chrome and Opera. It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.

Interesting, however it still begs the question where does it check there untrusted/revoked certificates mentioned in your quote  ?

Quote from: MartinZ
It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.

Also, why would the certificates be present in the (extract) list, image extract I posted in Reply #1
Title: Re: No Avast certificates in Chrome and Firefox
Post by: ccm582 on August 18, 2022, 01:50:20 PM
Thank you, NON, for the clarification. It would be good if Webshield works without changing the certificates.

But why does DavidR have the Avast Certificate in his version 103 of Firefox? It could be that it is stored among other Certificates but it is not used for Chrome and Firefox. Which explains why Brave browser has the Avast Certificate.
Title: Re: No Avast certificates in Chrome and Firefox
Post by: NON on August 18, 2022, 05:07:04 PM
Interesting, however it still begs the question where does it check there untrusted/revoked certificates mentioned in your quote  ?
If you mean who are to check these untrusted/revoked certificates, it's browser. You can see Firefox/Chrome warns about bad certificate accessing here:
https://badssl.com/

If MITM method was used, browsers (sometimes WebShield itself) also warns invalid certificate as WebShield checks it is valid or not and transmit the results via how Avast signs it.


Quote
Also, why would the certificates be present in the (extract) list, image extract I posted in Reply #1
Avast certificate is used(reserved) for MITM as fallback method when these "new" method does not work somehow. I got that before.

it happens that MITM must be enabled on certain systems or certain browser versions. It is designed in a way, that if other methods fail, we use MITM even on Firefox/Chrome. For this reason we also provide the browser cert store with our root certificate, so that in case of this "fallback" everything still runs smoothly.


So, there should be the certificate on Firefox/Chrome store, if things not changed since above.