Author Topic: Avast HTTPS Scanning, FireFox 67 and Certificates  (Read 2932 times)

0 Members and 1 Guest are viewing this topic.

Offline AZBruno

  • Jr. Member
  • **
  • Posts: 60
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #15 on: October 14, 2019, 12:19:38 AM »
I am now running Avast 19.8.2393 (build 19.8.4793.541) and Firefox 69.0.3.

I no longer have thousands of Avast certificates, although the MachineKeys folder still has 94 items... most as a result of Avast before disabling HTTPS scanning. Before I re-enable it, I was wondering if anyone can tell me whether the same issue will exist.

Thanks.
« Last Edit: October 14, 2019, 06:18:57 AM by AZBruno »

Offline Jakub Dubovic

  • Avast team
  • Jr. Member
  • *
  • Posts: 45
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #16 on: October 14, 2019, 05:01:55 PM »
Hello,

The issue should be solved now. I would be grateful if you could verify it by visiting a few websites and checking that the number of certificates didn't increase.
If this is not the case and the issue persists, please let me know.

Thanks!

Offline AZBruno

  • Jr. Member
  • **
  • Posts: 60
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #17 on: October 14, 2019, 11:02:16 PM »
I've enabled HTTPS scanning and will monitor it.

Meanwhile, can you tell me the difference between "avast! SSL Scanner Cache" and "Avast SSL Scanner Cache". They both have certificates

Offline Jakub Dubovic

  • Avast team
  • Jr. Member
  • *
  • Posts: 45
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #18 on: October 15, 2019, 06:09:31 PM »
"Avast SSL Scanner Cache" is the current name of the Avast certificate authority storage. "avast! SSL Scanner Cache" is now deprecated and will no longer be used when generating new certificates.

Edit: missed a word
« Last Edit: October 16, 2019, 12:20:36 PM by Jakub Dubovic »

Offline AZBruno

  • Jr. Member
  • **
  • Posts: 60
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #19 on: October 16, 2019, 06:47:51 PM »
So is it OK to delete all the certificates under the "avast! SSL Scanner Cache"?

Also, how can I delete the nodes of "avast! SSL Scanner Cache" and "avast!Mail Scanner Trusted" (which has no certificates now). I do not see a delete option for the nodes in the Certificates MMC snap-in.

Offline Jakub Dubovic

  • Avast team
  • Jr. Member
  • *
  • Posts: 45
Re: Avast HTTPS Scanning, FireFox 67 and Certificates
« Reply #20 on: October 17, 2019, 05:12:49 PM »
Yes, they can now be safely deleted using MMC.

As far as I know, MMC doesn't allow you to delete the nodes. It can be done using regedit with the following path: "Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\avast! SSL Scanner Cache"
As always when using regedit, please do this only at your own risk and don't forget to create a backup first.