Avast 20.2.2401 SSL certificate doubt > enlightened (solved)

[fvmb]

Hi,

First of all congratulations to Avast team for the new version 

Unfortunately  I have a problem. i can´t see avast ssl certficate in work at any of my browsers, Edge chromium, Google Chrome, Firefox or Avast Secure Browser, all last updated versions (stable versions -non beta), win10Pro updated and everything else running normally.  I tried also to restart several times after installed the new version, i also tried to make a clean unistall for Avast with Avast Clear and also reinstalled Browser and finally also tried to install the certificate manually and not working at all.

Please give some kind of solution for this.

Kind Regards,

Filipe

[fvmb]

Hi,

First of all congratulations to Avast team for the new version 

Unfortunately  I have a problem. i can´t see avast ssl certficate in work at any of my browsers, Edge chromium, Google Chrome, Firefox or Avast Secure Browser, all last updated versions (stable versions -non beta), win10Pro updated and everything else running normally.  I tried also to restart several times after installed the new version, i also tried to make a clean unistall for Avast with Avast Clear and also reinstalled Browser and finally also tried to install the certificate manually and not working at all.

Please give some kind of solution for this.

Kind Regards,

Filipe

Any news  ?

Regards,
Filipe

[bob3160]

I haven't run into any issue?
Screenshot of the error may be helpful.

[fvmb]

I haven't run into any issue?
Screenshot of the error may be helpful.

The fact of any ssl certicate for an Antivirus software doesn´t appear in any browser, its not working as MITM (Man-in-the-middle) to protect don´t give us a message error.
But its not there and its not actively protecting from MAM attacks ...

So i can just show you a screenshot where is supposed to be the Avast SSL certificate

Kind Regards,
Filipe

Ps: The Avast certificate is installed on the browsers certificates store but is not active.
This makes me think that can be an issue with registry keys related to the importation of Avast certificate to a browser.

[DavidR]

@  fvmb
Avast also used DigiCert which you can see on this forum, however that isn't what you are asking about.

Its SSL certificates appear to be present and scanning the traffic on my system.

I can see the SSL Certificate in my Browsers Options, my attached images a & b.
When I switch to a new topic/page/website, I can see the avast tray icon change form (throbbing), image c attached.  This is an indication that it is scanning. 

Are you seeing this tray icon activity when you switch sites, such as the one in your image3 ?

Previously it was easier to see scanning in action as the tray icon rotated

[fvmb]

@  fvmb
Avast also used DigiCert which you can see on this forum, however that isn't what you are asking about.

Its SSL certificates appear to be present and scanning the traffic on my system.

I can see the SSL Certificate in my Browsers Options, my attached images a & b.
When I switch to a new topic/page/website, I can see the avast tray icon change form (throbbing), image c attached.  This is an indication that it is scanning. 

Are you seeing this tray icon activity when you switch sites, such as the one in your image3 ?

Previously it was easier to see scanning in action as the tray icon rotated

Hi David,

I now that Avast is scanning my ssl connections and as you the bahaviour is the same and normal. But the browser its not using the MITM Avast certificate which is important to scan advanced malware thorught ssl connections. Before in last version was not a problem.
Can you please report this to Staff ?

Kind Regards,
Filipe

[HK]

Hi Filipe,

thank you for your report.

Each browser works differently and we are always trying to choose the most optimal way to secure your connection. If you want to be sure WebShield is working you can try two options:
 - Try to download eicar test file http://2016.eicar.org/85-0-Download.html. It is anti-malware test file that does not contain any malicious part.
 - Try (just for testing purposes as we do not recommend using this browser for regular browsing) Internet Explorer browser that will always show avast! SSL certificate.

Best regards,
HK

[DavidR]

It appears to be working as expected on my win10 system and using the latest Firefox version.

First I get the alert by the web shield.  On closing that alert I now see a failed Secure Connection page, showing the web shield had intercepted the https traffic.

[lukor]

DavidR, thank you for the confirmation! L.

[fvmb]

Hi Filipe,

thank you for your report.

Each browser works differently and we are always trying to choose the most optimal way to secure your connection. If you want to be sure WebShield is working you can try two options:
 - Try to download eicar test file http://2016.eicar.org/85-0-Download.html. It is anti-malware test file that does not contain any malicious part.
 - Try (just for testing purposes as we do not recommend using this browser for regular browsing) Internet Explorer browser that will always show avast! SSL certificate.

Best regards,
HK

Hi HK,

Sorry for the late reply i was working.
So Lukor the webshield i know and i tried just to be sure with eicar files tests and AMTSO, its working perfectly fine. The issue its with all the browsers i use normally, Google Chrome, Mozilla Firefox, Edge chromium, and the Avast Secure Browser, nome of those are showing the Avast SSL certificate which it should be using for scanning https traffic for malware and other security threats that webshield alone can not do it with the same efficiency. As you should know many Antivirus Companies are using intermediary SSL certificate for scanning https traffic and Avast also does that and very well. Until now everything was fine. With the last update the Avast SSL certificate doesnt kick in anymore. I checked on Windows Certificate store, as i always do when i install diferent security software in diferent computers for beta testing and malware testing for my IT support work and its fine there, the Avast SSL certificate is appearing on the Windows Certificate store as it should. I tried several clean unistall Avast and all browsers and reinstalled all and restarted several times - no joy.

So what can i do to make Avast SSL certificate kick again ?

Thank you for your attention

Kind Regards,
Filipe

PS: Checked also on Avast blog this info: https://blog.avast.com/2015/05/25/explaining-avasts-https-scanning-feature/

PS: On AMTSO the Avast didnt protect agains the cloud based testing file. On the 20.1 version this was not a problem.