Firefox, Google, SSL certificates and connections … and Kaspersky

Software

no-kasperskyThe Set-up
A system with Microsoft Windows operating system, Firefox as browser, Kaspersky as the antivirus.

When you try to load a god-forgotten page like google.com (or after trying to use the embedded web search box in Firefox) you end up with an error page. Unknown SSL certificate and a mysterious SEC_ERROR_UNKNOWN_ISSUER message…

My comment
aaaaalright!

Solution
It seems that Kaspersky puts its hands quite heavily on the connections made by a Windows computer (if I Google for that I got over 107-thousands results). What can you do? First carefully check all the configuration options that the Antivirus makes available. Then, if you cannot solve, please be aware that Kaspersky installs its own “master” SSL certificate, against of every other certificate will be “compared” … This file is also not read automagically by Firefox (even if installed at system level) … So you have to dig in your computer’s file system, and then manually install over Mozilla’s browser.

Only in this way – at last – those little and insignificant Google company SSL cert is being recognized and you can go on your browsing. The SSL file to load is called ‘(fake)Kaspersky Anti-Virus personal root certificate.cer’ and you have to check for it on those locations, given your Windows version:

  • Windows 2000 / XP – %AllUsersProfile%\Application Data\Kaspersky Lab\AVP60MP4\Data\Cert\
  • Windows Vista / 7 – %AllUsersProfile%\Kaspersky Lab\AVP60MP4\Data\Cert\
  • else a path like C:\ProgramData\Kaspersky Lab\AVP16.0.0\Data\Cert\

[As a more precise technical reference you can use this document or this post over  Kaspersky websites]


Alternative solution: change your antivirus … ASAP!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s