User 13 Posted November 8, 2013 Posted November 8, 2013 With https protection activated in ESS and using Firefox 25 I get the error that the connection can not be trusted for the sites: https://maps.google.com https://translate.google.com https://drive.google.com https://news.google.com https://mail.google.com etc. and also www.youtube.com I have to make an exemption for every site in the certificat manager in Firefox. Is this normal? Other https sites are working without problems.
Administrators Marcos 5,458 Posted November 8, 2013 Administrators Posted November 8, 2013 I'm able to open Google websites as well as other https websites in Firefox 25 and SSL scanning enabled fine. Could you post a screen shot of the warning you're getting?
User 13 Posted November 8, 2013 Author Posted November 8, 2013 (edited) There is also a problem with google's image search in Firefox with https protection on: A lot of pictures are not loaded in every search. And when I scroll down no more pictures are loaded. Edited November 8, 2013 by User
Weng 3 Posted November 9, 2013 Posted November 9, 2013 I have an opposite situation. I added a website to block but I still can access it. It is confirmed that the list is not working probably.
Administrators Marcos 5,458 Posted November 9, 2013 Administrators Posted November 9, 2013 Do you have this problem when opening the page in Internet Exporer?
Gualano Marco 2 Posted November 9, 2013 Posted November 9, 2013 Do you have this problem when opening the page in Internet Exporer? I have this problem too only with FF v.24, and these sites opens normally with IE.
User 13 Posted November 9, 2013 Author Posted November 9, 2013 Do you have this problem when opening the page in Internet Exporer? No, in Internet Explorer 10 it is working.
Veeshush 3 Posted November 9, 2013 Posted November 9, 2013 I'm not at all saying to dump "https protection activated in ESS" but there is another really great Firefox addon for HTTPS: https://www.eff.org/https-everywhere
Khelge 0 Posted November 10, 2013 Posted November 10, 2013 Advanced setup->Web and email->Protocol filtering->SSL Select "Do not scan SSL protocol" and your firefox starts working again. I had this problem suddenly occur for the first time mid last week. Checked this option instead of "Always scan SSL protocol" and it all went back to normal. Would be nice if you guys at ESET could fix this, or figure a way that we can prevent this from happening as there is no way you can turn it on in the webbrowser to make content show temporarily.
User 13 Posted November 10, 2013 Author Posted November 10, 2013 (edited) Advanced setup->Web and email->Protocol filtering->SSL Select "Do not scan SSL protocol" and your firefox starts working again. I think it is better only to deactivate https protection under ->HTTP, HTTPS. If you deactivate SSL, e-mails are not scanned if you use POP3S or IMAPS. Anyway I hope this will be fixed soon by ESET. It seems to me that Firefox does not fully accept ESET's security certificate for google websites as it says "this connection is untrusted". Edited November 10, 2013 by User
tommy456 12 Posted November 13, 2013 Posted November 13, 2013 The problem with ssl for me seems to be Mozilla related certs are blocked by eset , if you select to trust them, it then blocks them, select exclude they stay unblocked, also v7 for me keeps loosing stored cert permissions, and sometimes eset ssl will prevent/delay a web page loading until the pop up is generated by eset for you to trust or exclude the ssl cert of that site this is using ie 7 on a win xpsp3 machine v6 didn't display issues like this, except for the firefox ssl issues they where present in v5 maybe even v4
User 13 Posted November 14, 2013 Author Posted November 14, 2013 I searched a little bit further and found this in the ESET knowlegebase: KB Solution ID: SOLN3126 ESET is aware of this issue and is working on a product update that will allow Mozilla Firefox to access websites that use SSL certificates with SSL scanning enabled. Now I'm sceptical, if a solution to this problem can be expected soon, as this was posted over a year ago.
Gualano Marco 2 Posted November 15, 2013 Posted November 15, 2013 (edited) Is there any explanation from eset moderators? Edited November 15, 2013 by Gualano Marco
User 13 Posted November 23, 2013 Author Posted November 23, 2013 I had opened a support ticket with German ESET support and they confirmed that there is still no fix for this problem. They suggested to disable SSL protection as recommended in the ESET knowlagebase.
Administrators Marcos 5,458 Posted November 23, 2013 Administrators Posted November 23, 2013 I'm getting an error sec_error_inadequate_key_usage, is it the same error as you're getting? I've found the same issue reported by a Kaspersky user here: hxxp://support.mozilla.org/en-US/questions/950736. It seems that connection to google, youtube and maybe some other servers is not allowed by Firefox when a self-signed certificate is used. Tested with Opera and IE, no problem accessing the websites noticed.
User 13 Posted November 24, 2013 Author Posted November 24, 2013 I'm getting an error sec_error_inadequate_key_usage, is it the same error as you're getting? Yes, I made a new screenshot:
User 13 Posted November 24, 2013 Author Posted November 24, 2013 (edited) Tested with Opera and IE, no problem accessing the websites noticed. Yes, in Internet Explorer 10 it seems to work, as I said above. Also Google Image search looks really strange in Firefox, see the pic in Posting #4. Only two or three lines of pics are loaded and the rest is grey squares, but no error message is displayed. Edited November 24, 2013 by User
ESET Moderators Peter Randziak 1,182 Posted November 27, 2013 ESET Moderators Posted November 27, 2013 Hello, the issue "sec_error_inadequate_key_usage" is fixed in Internet protection module: 1092, we are testing it now internally. I will let you know when it will be released for pre-release users.
Solution User 13 Posted December 2, 2013 Author Solution Posted December 2, 2013 Internet protection module 1092 is online. The problems with google seem to be solved.
Recommended Posts