Quantcast
Channel: SSL/TLS Questions and Answers - Recent questions and answers
Viewing all articles
Browse latest Browse all 1113

Answered: I'm getting an error with Avast SSL on my Chrome browser

$
0
0
Please verify that the version of Avast that you are using is up-to-date. Avast 2015 uses HTTPS scanning to secure your computer. This process involves installing a Trusted CA Root to your computer and then generating security certificates from that Root, based on the actual certificates on the website.  That is to say the certificate matches the expiration date of the original SSL.  In this manner, Avast is able to scan your HTTPS content prior to it reaching your computer.

 

The problem comes from beta versions of the software that create the locally-generated security certificate using the sha1 algorythm.  Additionaly, there is a rule in Chrome that automatically distrusts any website that uses sha1 past January 1, 2017.  So when you use the older version of Avast and visit a website with a certificate that expires after January 1, 2017, the older version of Avast will create a sha1 certificate for the website that triggers the Chrome rule.  Hence, your website is "untrusted" in Chrome.

 

I've spoken to Avast technical support and they assure me that the current versions of the software issue the replacement certificates using the SHA256 algorythm, which should prevent the error from occurring.

 

TL;DR:  Update your Avast software.

Viewing all articles
Browse latest Browse all 1113

Trending Articles