Author Topic: Avast SSL certificates not trusted  (Read 6318 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast SSL certificates not trusted
« on: November 16, 2014, 03:24:35 PM »
SSL certificate of Avast 2015.10.0.2206 are not trusted by EMET 5.1
Example:
EMET detected that the SSL certificate for "iecvlist.microsoft.com" is not trusted by the rule "MSLiveCA" associated with the domain "login.live.com".

Certificate Trust check failed:
  Application    : C:\Program Files\Internet Explorer\iexplore.exe
  User Name    : W8PROASUS-64\hansmarion
  Session ID    : 0
  PID       : 0xAC0 (2752)
  TID       : 0x21DC (8668)

Certificate details:

[SSL CERTIFICATE]
Subject Name    : CN=*.vo.msecnd.net
Issuer CA    : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Serial Number    : F66D670856630B41A751FD6BF840E9F4
Thumbprint    : 4B2C09F65DAAC9C873FE798A1FEA0E951FC80EDE
Signature Alg    : sha1RSA
Not Before    : 30-10-2014 01:40:20
Not After    : 29-10-2016 02:40:20
Public Key    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

[ROOTCA CERTIFICATE]
Subject Name    : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Issuer CA    : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Serial Number    : 012940
Thumbprint    : 011993DBBD02FA481553D0CA8F33B9F384486B44
Signature Alg    : sha1RSA
Not Before    : 25-10-2014 16:01:07
Not After    : 22-10-2024 16:01:07
Public Key    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

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast SSL certificates not trusted
« Reply #1 on: November 16, 2014, 04:24:40 PM »
EMET is a nice tool, but it has a history with SSL certificates problems.
One of the fixes in 5.1 is:
Quote
Addresses application compatibility issues between Certificate Trust and 64-bit Internet Explorer.
I would say report it to MS and hope they will fix it soon.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48568
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Avast SSL certificates not trusted
« Reply #2 on: November 17, 2014, 12:16:17 PM »
Fixed in the latest version of Avast 2208. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet