Kaspersky root certificate. Checking secure connections in mozilla firefox – Operating instructions KASPERSKY LAB KAV2011- Kaspersky anti-virus

To make sure that https traffic is not re-encrypted by antivirus programs or proxies, use one of the methods below:

1. Go to the diagnostics portal, to the “Connection check” section (https://help.kontur.ru/check). If there is no checkmark in one of the lines, and the value in the “Certificate” column is highlighted in red, then the certificate has been replaced. The name of the program replacing the certificate is indicated in the “Publisher” column.

2. Go to the website https://auth.kontur.ru, left-click on the “lock” icon (near the address bar) or right-click on the page > Properties > Certificates and check which server certificate is offered. The certificate should be like this:

Issued to: *.kontur.ru
Issued by: RapidSSL SHA256 CA
Serial number: 48 61 59 21 53 c2 cf cd e2 0c f8 ec 70 a1 9d 67

or like this:

Issued to: *.kontur.ru
Issued by: GlobalSign Domain Validation CA – SHA256 – G2
Serial number: 13 0b ab d5 ec ff a6 f0 71 ae 5a 36

If the certificate is different, then https traffic is re-encrypted. The name of the program replacing the certificate is indicated in the “Issued by” line.

Determine which program issued the certificate and configure it so that it does not interfere with the operation of our services. Instructions for setting up programs that can affect certificate substitution are presented below.

Avast Antivirus

Disable active protection for https sites. To do this, right-click on the Avast icon, which is located in the notification area, and select “Open Avast user interface.”

Go to Menu > Settings.

Select Protection > Core Protection > Web Protection.

Uncheck the following items:

Enable HTTPS scanning;
Enable script scanning.

Antivirus ESET Internet Security

Disable https protocol filtering in ESET Internet Security. To do this, open ESET > Settings > Advanced options.

Go to the Internet section and e-mail> Internet access protection > Web protocols > Module settings > uncheck the “Enable HTTPS protocol checking” checkbox.

Antivirus Kaspersky Internet Security

Depending on the version of Kaspersky, some interface elements may differ.

1. Disable Kaspersky Internet Security add-ons. For this purpose in Internet Explorer Select the Tools tab > Configure Add-ons.

In the Display section, select All Add-ons. Find the Kaspersky Protection and Kaspersky Protection Toolbar add-ons in the list, right-click on the line and select “Disable”.

2. Disable the injection of Kaspersky scripts and scanning of secure connections. To do this, open Kaspersky Internet Security > Settings > Advanced > Network > Inject script into traffic to interact with web pages.

3. Open Kaspersky Internet Security > Settings > Protection > Web Anti-Virus (or Web Protection).

Open Advanced settings and disable “Automatically activate the Kaspersky Protection extension in browsers.”

4. Disable HTTPS connection checking. For this Open Kaspersky Internet Security > Settings > Advanced settings > Network. In the block " Checking secure connections » disable the option " Check secure connections » .

Dr.Web Antivirus

Disable HTTPS connection checking. To do this, open Dr.Web > Settings > General > Network > Secure connections. Set the switch " Scan encrypted traffic" to the "Off" position. » .

AdGuard program

Disable HTTPS connection checking. If you have the AdGuard add-on installed in your browser, you do not need to disable anything for it. If it is not installed, then open the AdGuard program » > Settings > General settings > uncheck the item "Filter HTTPS protocol».

AVG Antivirus

Disable HTTPS connection checking. To do this, open AVG Antivirus > Settings > Components > Web protection or Online Shield > Settings > Uncheck the “Enable HTTPS scanning” checkbox.

360 Total Security

Click Protection On. > Settings.

Kaspersky PURE 3.0 verifies data transmitted over the SSL protocol.
To authenticate web servers and secure the SSL communication channel between the web server and the user's computer Kaspersky PURE 3.0 uses a self-signed electronic certificate. If, when visiting a possibly infected web resource, its certificate is identified by the program as untrusted, then Kaspersky PURE 3.0 will either close the connection or offer to accept/reject the certificate.
Certificate Kaspersky PURE 3.0 automatically installed in browsers Internet Explorer, Mozilla Firefox And Google Chrome . For browser Opera The certificate must be installed manually.

1. How to enable/disable scanning of secure connections

By default, secure connections are checked in Kaspersky PURE 3.0 included. You can enable/disable scanning by following these steps:

Settings.

In the upper right part of the window Settings go to the tab Additionally.
On the left side of the window Settings select item Net.
On the right side of the window Settings in the block do the following:
- To enable scanning of secure connections, select the checkbox.
- To disable scanning of secure connections, clear the checkbox Check secure connections.
In the window Settings click on the button OK.

2. How to configure settings for checking secure connections

To configure settings for checking secure connections, follow these steps:

In the upper right part of the main window, click on the link Settings.

In the upper right part of the window Settings go to the tab Additionally.
On the left side of the window Settings select item Net.
On the right side of the window Settings in the block Checking secure connections select the action that will be performed when checking a secure connection:
- Always check secure connections– when connecting your computer to the web server, the program, depending on the installed protection mode, will do the following:
  - When working in interactive mode, protection will notify you that an untrusted certificate has been detected and will offer to accept/reject the certificate.
  - When working in automatic mode the connection will be terminated without notice.
- Check secure connections if enabled Parental Controls – when connecting your computer to a web server, the program will check for secure connections if Parental Control is enabled.

For fast loading web pages and data transmission over a secure connection, some web servers (for example, Google) use the SPDY protocol instead of the HTTP protocol. If a secure connection is established using the SPDY protocol, then the data transmitted from the web server is not checked using heuristic analysis. In this case, it is likely that possibly infected programs will be downloaded.
To have the program check the data transmitted from the web server using heuristic analysis and control it, select the checkbox Use HTTP protocol instead of SPDY protocol.
In the window Settings click on the button OK.

Close the main program window.

3. How to install a certificate to verify secure connections in the Opera browser

To install a certificate Kaspersky Lab in the browser Opera, follow these steps:

Step 1. Save the certificate on your computer

Close all browser windows.
In the upper right part of the main window, click on the link Settings.

In the upper right part of the window Settings go to the tab Additionally.
On the left side of the window Settings select item Net.
On the right side of the window Settings in the block Checking secure connections click on the button Install certificate.

In the window Installing a certificate click on the button Next.

In the window Installing a certificate select item Install certificate manually, following the instructions.
Click on the button Next.

In the window Installing a certificate click on the button Save certificate.

In the window Save certificate save the certificate to Desk.

In the window Installing a certificate click on the button Cancel.

In the window Settings click on the button OK.
Close the main program window.

Step 2. Install the certificate in the browser Opera

Open your browser Opera.
In the upper left corner of the browser window, click the button Opera and select from the drop-down menu Settings –> General Settings.

In the window Settings go to the tab Advanced.
On the left side of the window, select Safety.
Certificate management.

In the window Certificate management go to the tab Publishers.
On the right side of the window Certificate management click on the button Import.

In the window Importing a certificate Locate the previously saved certificate.
Click on the button Open.

In the window Installing a certificate click on the button Install.

In the window Installing a certificate click on the button OK.

If you don't want the program to notify you when you use a certificate when you visit a website Kaspersky Lab, then do the following:
- In the window Certificate management go to the tab Publishers.
- On the left side of the window, select Kaspersky Anti-Virus Personal Root Certificate.
- On the right side of the window, click the button View.

In the window Certificate uncheck the box Warn before using this certificate.
In the window Certificate click on the button OK.

In the window Certificate management click on the button OK.
In the window Settings click on the button OK.

When I installed on a newly purchased laptop with operating Windows system 8.1 x64 Kaspersky antivirus, or rather Kaspersky Internet Security for all devices (Version 2016 (16.0.0.614)), then on the first attempt to access the Yandex website (also true for Google) I received the following warning in the window FireFox browser x64 v43.0.0:

At the same time, most other sites operating using the HTTPS protocol, including my blog, opened quite normally. That is, there were no crashes in the browser.

How Kaspersky checks SSL-protected connections

Kaspersky Anti-Virus verifies SSL-protected connections by installing a Kaspersky Lab certificate (self-signed certificate). And the absence of such a certificate in the browser storage leads to the described error. Automatic installation certificate works for the Internet Explorer browser. And for Mozilla Firefox, in order to fix the error described above, you need to manually register the certificate in the browser settings.

How to add Kaspersky certificate to FireFox

To add a certificate from Kaspersky, follow these steps:
Go to your browser settings

In the "Advanced" section of the "Certificates" menu, click the [View Certificates] button

In the “Certification Authorities” tab, click the [Import...] button

Select a certificate (fake)Kaspersky Anti-Virus personal root certificate.cer. Which for Kaspersky 16.0.0.614 in Windows 8.1 is located at C:\ProgramData\Kaspersky Lab\AVP16.0.0\DataCert and click the [Open] button
If you don't see the folder in the browser ProgramData, then read how to fix it.

In the window that appears, select the required options (I selected all). And click [OK]

Now in the list of FireFox certificate stores you should see a Kaspersky Lab certificate, which the browser will consider trusted.

After carrying out all the above steps, Yandex and Google sites began to open normally.

How to allow viewing of hidden folders in Windows Explorer

Go to the control panel and select "Folder Options"

In the “View” tab, check the box at the very bottom “Show hidden files, folders and drives”

An alternative solution for unblocking the HTTPS protocol in Kaspersky

This option consists of disabling Kaspersky scanning of secure connections. To do this, go to your antivirus settings.

Almost every user has encountered many problems in the browser. One such problem is SSL connections, which prevents you from viewing required pages. Let's look at all the ways to fix this problem.

First stage

So, first you need to decide what kind of problem it is, where it comes from, and only then look for ways to fix it. If an SSL connection error appears on your computer when you try to connect to any page on the Internet through a browser, this indicates that the problem is caused by a mismatch in the system. Therefore, this needs to be corrected, but, as practice shows, this is not as easy as it might seem at first glance.

Often everyone refuses to work installed browsers. The only way out is to use standard IE, which in 90% of cases does not produce such an error. This browser can be used until a solution to the problem is found. In simple words, an SSL error indicates that a connection to the server cannot be established for some reason. Let's figure out what causes this kind of problem.

Causes of SSL Errors

So, there are often only a few ways to find out what exactly is preventing you from accessing the Internet normally. So, the first thing you need to do is check the settings of your antivirus, since it is it that can block connections, which is why all the problems arise. You may need to add your browser to exceptions and set less stringent controls on incoming and outgoing traffic. It is also recommended to check if necessary, lower the protection level.

Back in Google error SSL connections can occur when you do not have an antivirus program and the system is infected. In principle, this can be solved either by reinstalling the OS or by scanning the system for infected files. Also note that your time settings may be incorrect. Consequently, a discrepancy is detected on the server, and the connection is determined to be unreliable or insecure. Another common reason is an outdated browser.

SSL origin connection error

If you like to play good games on your computer and buy them online, then most often such a product requires activation. Even though this is a minute process, it can become a real headache for you due to SSL protocol failure. However, the detailed error text may look different. For example: “client authentication certificate required” or “SSL_ERROR_PROTOCOL”. You can fix everything as follows.

We go into the antivirus, if, of course, it is available. Next we go to the settings, to be more precise, we need the line “https protocol filtering”. Here you need to uncheck the box, that is, turn it off. Reboot the computer and try to install origin. If everything went well, then if not, it is advisable to install the game from the disk and just try to update it. What else can help is using a different browser, for example, not Chrome, but Opera.

SSL connection error: fixing the problem

Let's figure out what to do if this kind of problem arises. First of all, there is no need to panic. It’s not all that scary and can be resolved in a few minutes. The main reason for the error is that, as noted above, this happens for several reasons. One of them is a dead battery in the BIOS. It can be changed, it costs 40-50 rubles.

We also pay attention to the antivirus and the list of programs that are on the blacklist. It will block the connection of these applications. It is worth noting that a broken registry can often be the cause of the problem. Most users rack their brains to solve the problem, but sometimes it happens that this is not an error at all. The fact is that most browsers allow you to enable or disable support for SSL files. Just find the required option in the settings and check the box, after which the problem should be solved.

Enable SSL and Cookies in the browser

In some cases, this protocol is not required. But when you want to use Adsense pages, this option must be enabled. The same applies to Cookies. In principle, for normal operation and display of information, incl. and advertisements, you need a working SSL. So, let's move on to setting up the browser. First of all, you need to go to the menu, and then select settings.

There you should see a tab " Additional settings", that's what we need. The next step is to select the “Content Settings” item, and then you need to go to “Personal Data”. Before us there will be a menu called “ Cookies" We go there and check the box next to the “Save local data” item. Close the tab and switch to HTTPS/SSL. Similar work needs to be done here. Check the box next to “Check if the certificate has been revoked from the server.” If the checkbox is not checked, then SSL will not work correctly. That's all, restart the browser and get to work.

A few more simple ways to solve the problem

If you don’t have time to deal with browser settings or scan the system, then you can try several times in a row which you need to log into. It is likely that after this the information will be partially displayed. However, in the future you will need to do everything according to the instructions. Another way out is to reset your browser settings to Default, that is, to standard ones. This will enable/disable all necessary plugins and scripts. It is also recommended to clear the cache, which sometimes gives a positive result. You can also go to Windows folder, then system 32, then go to drivers to find the “etc” file there. The last line should look like this: 127.0.0.1. Everything below this inscription must be removed. After this, Google's SSL connection error will disappear.

A few important points

Please note that sometimes sites without reliable or expired certificates are a kind of virus carrier. In this case, it is normal to see a window that says “SSL connection error.”

What to do if you still need to visit the resource, you ask. To do this, you must continue the connection by confirming your decision. In this case, you may get a virus on your computer, which is not good. Although if you have it installed, it will give you a corresponding message and automatically block you from working with the malicious site.

Now you know what an SSL connection error is. We also figured out how to fix it. I need to say a few more words about the fact that you need to periodically clear Cookies in your browser. This will not only speed up page loading, but will also relieve you of the problem described above. It is advisable to at least sometimes full scan systems for viruses and suspicious files.

Conclusion

You must understand that if you get this kind of error, then something is wrong with your computer. First of all, check the time. If the year, month or time of day is not correct, you need to correct it. To do this, in your desktop tray operating system Click on the clock several times and set the real values. This usually solves the problem immediately. If this does not happen, go to and see if SSL protocol support is enabled. If everything is as it should be, then most likely the problem is antivirus program or a malicious file that blocks the connection. Removing or moving to quarantine should help.

Checking secure connections in Mozilla Firefox

Mozilla Firefox browser does not use certificate store Microsoft Windows. To check SSL connections when using Firefox, you must install the Kaspersky Lab certificate manually.

To install a Kaspersky Lab certificate, follow these steps:

In the Certificates block, select the Security tab and click the button View certificates.
Certification Authorities and click on the Restore button.
.

To install a Kaspersky Lab certificate for Mozilla Firefox version 3.x, follow these steps:

In the browser menu, select Tools ® Settings.
In the window that opens, select the Advanced section.
On the Encryption tab, click the button View certificates.
In the window that opens, select a bookmark Certification Authorities and click on the Import button.
In the window that opens, select the Kaspersky Lab certificate file. Path to the Kaspersky Lab certificate file: %AllUsersProfile%\Application Data\Kaspersky Lab\AVP60MP4\Data\Cert\(fake)Kaspersky Anti-Virus personal root certificate.cer.
In the window that opens, check the boxes to select actions for which the installed certificate will be used for verification. To view information about the certificate, use the View button.

If your computer is running an operating system Microsoft systems Windows Vista, then the path to the Kaspersky Lab certificate file will be like this: %AllUsersProfile%\Kaspersky Lab\AVP60MP4\Data\Cert\(fake)Kaspersky Anti-Virus personal root certificate.cer.