ESET blocking Filezilla update

[Samoréen 8]

Hi,

 

I just tried to update Filezilla and the operation failed because "the root certificate is not trusted".

 

Status: Disconnected from server
Status: Downloading /updatecheck.php?platform=i586-pc-mingw32msvc&version=3.7.4.1&osversion=6.1&osarch=64
Status: Resolving address of update.filezilla-project.org
Status: Connecting to [2a01:4f8:160:7342::4]:443...
Status: Connection established, initializing TLS...
Error: Root certificate is not trusted
Error: Disconnected from server: ECONNABORTED - Connection aborted
Error: Disconnected from server
Error: File transfer failed
 

I had to add filezilla.exe to the list of applications excluded from protocol filtering in order to make a successful update.

[Marcos 5,070]

Filezilla doesn't trust self-signed certificates or CA certificates in the system Trusted Root Certification Authorities certificate store. If you enable SSL scanning, you must exclude Filezilla's certificate from scanning by switching to interactive mode ("Ask about non-visited sites") and excluding the certificate, when asked.

Edited March 18, 2014 by Marcos

[Samoréen 8]

Hi Marcos,

 

If I remove filezilla.exe from the exclusion list, switch to "Ask about non-visited sites" , launch Filezilla and try again to update, there's no error and no question asked about excluding or accepting a certificate.

 

If I switch again to "Always scan SSL protocol", the same error as reported above appears again.

 

Since I don't want to stay in interactive mode, the only solution is as described above : adding filezilla.exe to the list of applications excluded from protocol filtering

[Marcos 5,070]

You should check the box "Apply created exceptions based on certificate box" in order for the certificate to be excluded in automatic mode.

[Samoréen 8]

You should check the box "Apply created exceptions based on certificate box" in order for the certificate to be excluded in automatic mode.

 

This is what I did but as explained above, I didn't have the opportunity to exclude whatever certificate anyway.