Author Topic: No Avast certificates in Chrome and Firefox  (Read 3239 times)

0 Members and 1 Guest are viewing this topic.

Offline ccm582

  • Full Member
  • ***
  • Posts: 132
No Avast certificates in Chrome and Firefox
« on: August 13, 2022, 10:52:16 AM »
Normally, Avast Free would insert its own certificate for HTTPS scanning into the browser. But it doesn't in Firefox and Chrome browsers but does in Brave browser. Why is this?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: No Avast certificates in Chrome and Firefox
« Reply #1 on: August 13, 2022, 02:13:38 PM »
Its certainly in my version 103 of Firefox.

That said I'm still using Avast Free version 22.5, you don't say what version of Firefox and Avast you are using.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline ccm582

  • Full Member
  • ***
  • Posts: 132
Re: No Avast certificates in Chrome and Firefox
« Reply #2 on: August 13, 2022, 04:11:30 PM »
Oops, I forgot to mention I'm using latest version of Avast Free Beta 22.8.6028 (build 22.8.7470.734) and latest versions of Chrome and Firefox. I tried repairing and reinstalling but still no Avast Certificate in these browsers but there is in Brave browser.

Web Shield still works even though the Avast Certificate is not installed. I hope the Avast Team can inform us whether not having the Certificate installed in Chrome and Firefox is a bug or intentional.

BTW, restoring Settings do not restore the settings in Do Not Disturb Mode.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: No Avast certificates in Chrome and Firefox
« Reply #3 on: August 13, 2022, 05:26:19 PM »
I just wonder how easy it would be to get back to the regular release of Avast and see if this is only an issue with the latest beta version.

I did miss that you posted in the Avast Beta sub-forum :)
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline ccm582

  • Full Member
  • ***
  • Posts: 132
Re: No Avast certificates in Chrome and Firefox
« Reply #4 on: August 13, 2022, 06:08:08 PM »
I remember when I used the regular release, the Certificate were there. So no need to uninstall and reinstall because Restoring Settings do not restore everything and we have to manually restore some settings which take time.

Best for the developers to either fix it or tell us that they intentionally removed the Avast Certificate from Chrome and Firefox.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: No Avast certificates in Chrome and Firefox
« Reply #5 on: August 13, 2022, 07:09:26 PM »
I was just trying to confirm this issue was introduced with this beta build.

You can report a bug from the Avast UI:
About Avast, from the Avast tray icon, assuming it is still there in this beta release.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline NON

  • Japanese User
  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5477
  • Whatever will be, will be.
Re: No Avast certificates in Chrome and Firefox
« Reply #6 on: August 18, 2022, 10:02:46 AM »
I believe latest Avast does not use its own certificate for Firefox/Chrome, except for fallback. This is since Avast 2016.

IMPROVED: WebShield HTTPS Scanning - We introduced a new method of HTTPs scanning. It is used in Firefox, Chrome and Opera. It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.
Desktop: Win10 Pro 22H2 64bit / Core i5-7400 3.0GHz / 32GB RAM / Avast 23 Premium Beta(Icarus) / Comodo Firewall
Notebook: Win10 Pro 22H2 64bit / Core i5-3340M 2.7GHz / 12GB RAM / Avast 23 Free / Windows Firewall Control
Server: Win11 Pro 23H2 64bit / Core i3-4010U 1.7GHz / 12GB RAM / Avast One 23 Essential

Avast の設定について解説しています。よろしければご覧ください。

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: No Avast certificates in Chrome and Firefox
« Reply #7 on: August 18, 2022, 12:00:12 PM »
I believe latest Avast does not use its own certificate for Firefox/Chrome, except for fallback. This is since Avast 2016.

IMPROVED: WebShield HTTPS Scanning - We introduced a new method of HTTPs scanning. It is used in Firefox, Chrome and Opera. It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.

Interesting, however it still begs the question where does it check there untrusted/revoked certificates mentioned in your quote  ?

Quote from: MartinZ
It works without changing the certificates and the security parameters and certificates are verified by the browser itself, including checks for untrusted or revoked certificates.

Also, why would the certificates be present in the (extract) list, image extract I posted in Reply #1
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline ccm582

  • Full Member
  • ***
  • Posts: 132
Re: No Avast certificates in Chrome and Firefox
« Reply #8 on: August 18, 2022, 01:50:20 PM »
Thank you, NON, for the clarification. It would be good if Webshield works without changing the certificates.

But why does DavidR have the Avast Certificate in his version 103 of Firefox? It could be that it is stored among other Certificates but it is not used for Chrome and Firefox. Which explains why Brave browser has the Avast Certificate.

Offline NON

  • Japanese User
  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5477
  • Whatever will be, will be.
Re: No Avast certificates in Chrome and Firefox
« Reply #9 on: August 18, 2022, 05:07:04 PM »
Interesting, however it still begs the question where does it check there untrusted/revoked certificates mentioned in your quote  ?
If you mean who are to check these untrusted/revoked certificates, it's browser. You can see Firefox/Chrome warns about bad certificate accessing here:
https://badssl.com/

If MITM method was used, browsers (sometimes WebShield itself) also warns invalid certificate as WebShield checks it is valid or not and transmit the results via how Avast signs it.


Quote
Also, why would the certificates be present in the (extract) list, image extract I posted in Reply #1
Avast certificate is used(reserved) for MITM as fallback method when these "new" method does not work somehow. I got that before.

it happens that MITM must be enabled on certain systems or certain browser versions. It is designed in a way, that if other methods fail, we use MITM even on Firefox/Chrome. For this reason we also provide the browser cert store with our root certificate, so that in case of this "fallback" everything still runs smoothly.


So, there should be the certificate on Firefox/Chrome store, if things not changed since above.
Desktop: Win10 Pro 22H2 64bit / Core i5-7400 3.0GHz / 32GB RAM / Avast 23 Premium Beta(Icarus) / Comodo Firewall
Notebook: Win10 Pro 22H2 64bit / Core i5-3340M 2.7GHz / 12GB RAM / Avast 23 Free / Windows Firewall Control
Server: Win11 Pro 23H2 64bit / Core i3-4010U 1.7GHz / 12GB RAM / Avast One 23 Essential

Avast の設定について解説しています。よろしければご覧ください。