Google isn't loading
[Whenever I google anything in firefox (or even just try to access google itself) I get this error:]
www.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER
[With this clipboard:]
https://www.google.com/search?q=testing&ie=utf-8&oe=utf-8
Peer's Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: true
Certificate chain:
-----BEGIN CERTIFICATE----- MIIDjjCCAnagAwIBAgINAMdzH4/fQ5R6an6l6TANBgkqhkiG9w0BAQsFADBVMRow GAYDVQQKDBFLYXNwZXJza3kgTGFiIFpBTzE3MDUGA1UEAwwuS2FzcGVyc2t5IEFu dGktVmlydXMgUGVyc29uYWwgUm9vdCBDZXJ0aWZpY2F0ZTAeFw0xNjA1MDQwOTE3 MDJaFw0xNjA3MjcwODM5MDBaMGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxp Zm9ybmlhMRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUg SW5jMRcwFQYDVQQDDA53d3cuZ29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALtWtv2NP8vQ8BNGLg715aU7A2NhTu5D6feVpdV2O2S1p2nV NtcRNUAsH9B2qEFcH94xe6R3Xe/DOGDPFk+TDfpOEOtlRgc6k6ls+zq0EaawNWk6 v/65UHzLAxS6qJk2JT+v+m8JRapmL0dJhMG7vGpNy8cfLAubM7L6fFTNOQi+z7Fz BdctVBL50MAqL5IiLVhs1z/WlxuosMH28MW/r1IcahVR810nXIOabiWiFvVXOtEo TDOFRngtics8NSi+1gp+JF4tiO9LsIVI4WbDqhrZk2uLQjCXha+Jqw1RF8qsMnpW qUGhZuw+4Oa6wc0i246jgxcWhs57mxWu0asuEhECAwEAAaNKMEgwGQYDVR0RBBIw EIIOd3d3Lmdvb2dsZS5jb20wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAGmcI4Dd+0P/CX9PQMEx j6VQ5TdHsqzrhOlDmxwTPZM8Wd1l/dpPZiGxSx2XBQPAGoklkyId9DaKNVwVdQLT 1uY0EtVXIllSQCKsyLx8e/LSlhreTWAwuPSYJ5/M/FADc3mygKzIAvrM2Khh3S52 C7BlvnEHyJroJKM+dwNXvf9maQHKJKNFPHkaII3nUBWZvrpUbnevYPqtoaqPSif/ gr2zv47yw4kBEyGjWrd5a9uyEK5dml9wAtK12JW4b5P9XcIRrF9U5pxCBLsXLfQs Dl7ZmEBXzCHJ7oFpi4smrasB/j0OnQxXC5ausUrCGPdi4oJk1ES//IK0erJ9UZQ+ VRo= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDPzCCAiegAwIBAgIIfz4yV2auMrUwDQYJKoZIhvcNAQELBQAwVTEaMBgGA1UE CgwRS2FzcGVyc2t5IExhYiBaQU8xNzA1BgNVBAMMLkthc3BlcnNreSBBbnRpLVZp cnVzIFBlcnNvbmFsIFJvb3QgQ2VydGlmaWNhdGUwHhcNMTYwNTEwMjAwMzExWhcN MjYwNTA4MjAwMzExWjBVMRowGAYDVQQKDBFLYXNwZXJza3kgTGFiIFpBTzE3MDUG A1UEAwwuS2FzcGVyc2t5IEFudGktVmlydXMgUGVyc29uYWwgUm9vdCBDZXJ0aWZp Y2F0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtWtv2NP8vQ8BNG Lg715aU7A2NhTu5D6feVpdV2O2S1p2nVNtcRNUAsH9B2qEFcH94xe6R3Xe/DOGDP Fk+TDfpOEOtlRgc6k6ls+zq0EaawNWk6v/65UHzLAxS6qJk2JT+v+m8JRapmL0dJ hMG7vGpNy8cfLAubM7L6fFTNOQi+z7FzBdctVBL50MAqL5IiLVhs1z/WlxuosMH2 8MW/r1IcahVR810nXIOabiWiFvVXOtEoTDOFRngtics8NSi+1gp+JF4tiO9LsIVI 4WbDqhrZk2uLQjCXha+Jqw1RF8qsMnpWqUGhZuw+4Oa6wc0i246jgxcWhs57mxWu 0asuEhECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOC AQEAFEB59cN1drOG6zMpVAzLxJKpLp9rC/7ZetcsWT0wvZP9ixEJdTjPnemOk3h2 HPO6nniZO89U7I6P8XXd/srlSQ9BsdAHrbcjLOOaYiw+5p6K3tu0JHMXrDldib5G 2MDFBCEdvQzaREGYWrrhqSQW9U8UkfRxx0CCccK3hum2qyPq5GEcR5r/rBYwwSZd 4GhAuAcL1Wh7EqN+ArMakWxfafUbZBgU1kmdAG/km6POWIX0PtQcMeqjyJKswCP9 XwIZ42jOMKGMNBF5UBOSBqpsT3ncu3RIl6k5nX9Cd/3OD7TM+u2GBY5uunMNgCut 5Qq5ZL2+8KNa9YqftTwQZKqvlw== -----END CERTIFICATE-----
[HELP. PLEASE.]
Modificato da cor-el il
Soluzione scelta
To set up Firefox to work with Kaspersky's scanning feature, you can add the Kaspersky signing certificate as a trusted authority to sign fake certificates for other sites. It's possible Kaspersky will do that for you at Windows startup or some other triggering event, but if you have to do it by hand:
(Based on information from Kaspersky's forums)
Open Firefox's Certificate Manager:
"3-bar" menu button (or Tools menu) > Options
In the left column, click Advanced
On the right side, make sure the Certificates mini-tab is selected and then click the View Certificates button
In the Certificate Manager dialog, click the "Authorities" mini-tab (not the Personal or Servers mini-tab, which might initially be displayed by default)
If you see an existing "Kaspersky Anti-Virus Personal Root Certificate"
- Select it and Click "Delete or Distrust"
Now click "Import..."
Proceed to "C:\ProgramData\Kaspersky Lab\AVP16.0.0\Data\Cert\"
Select "(fake)Kaspersky Anti-Virus Personal Root Certificate.cer" and Open!
Set Firefox to trust that certificate for websites, and ignore the other two options.
Then you can test various secure sites to see whether Firefox now trusts the fake certificates. If it doesn't work right away, exit out of Firefox and start it up again.
Leggere questa risposta nel contesto 👍 2Tutte le risposte (5)
Oh, and I also turned off that secure connection scan thing in my Kaspersky. That worked for about 10 minutes or so.
hi, thanks for attaching the error message's details - unfortunately that reveals that kaspersky is still intercepting secure connections. in case you're not using a 2016 version of kaspersky, please try updating to this latest version. please also note that the option to disable the scanning of encrypted connections might take a restart of your pc to take effect. more details are available at How to troubleshoot security error codes on secure websites
Issuer: O=Kaspersky Lab ZAO, CN=Kaspersky Anti-Virus Personal Root Certificate
Soluzione scelta
To set up Firefox to work with Kaspersky's scanning feature, you can add the Kaspersky signing certificate as a trusted authority to sign fake certificates for other sites. It's possible Kaspersky will do that for you at Windows startup or some other triggering event, but if you have to do it by hand:
(Based on information from Kaspersky's forums)
Open Firefox's Certificate Manager:
"3-bar" menu button (or Tools menu) > Options
In the left column, click Advanced
On the right side, make sure the Certificates mini-tab is selected and then click the View Certificates button
In the Certificate Manager dialog, click the "Authorities" mini-tab (not the Personal or Servers mini-tab, which might initially be displayed by default)
If you see an existing "Kaspersky Anti-Virus Personal Root Certificate"
- Select it and Click "Delete or Distrust"
Now click "Import..."
Proceed to "C:\ProgramData\Kaspersky Lab\AVP16.0.0\Data\Cert\"
Select "(fake)Kaspersky Anti-Virus Personal Root Certificate.cer" and Open!
Set Firefox to trust that certificate for websites, and ignore the other two options.
Then you can test various secure sites to see whether Firefox now trusts the fake certificates. If it doesn't work right away, exit out of Firefox and start it up again.
Thanks. Working now.