General :  K-Meleon Forum
General discussion about K-Meleon. 
Invalid security certificates
Posted by: paulderdash
Date: April 03, 2017 05:16PM

I am trying the PortableApps.com version, but I seem to get invalid security cerificate on every site ('Error code: sec_error_unknown_issuer').

If I view the certificate, the issuer in each case is 'Adguard Personal CA', but I have the problem even if I disable Adguard.

Any ideas?

Options: ReplyQuote
Re: Invalid security certificates
Posted by: JohnHell
Date: April 03, 2017 09:44PM

Really, people out there have problem coming to K-meleon forum and posting directly to Bugs subforum and even though the problems have nothing related to K-meleon...


This is not a K-meleon bug. You have installed AdGuard proxy and now you don't know how to configure it.

Here are the instructions to solve the problem. Follow the Firefox instructions if you go through manual procedure. But have in mind that the certificate manager in K-meleon is under "Tools > Privacy > view data" menu.

https://kb.adguard.com/en/windows/solving-problems/connection-not-trusted

Options: ReplyQuote
Re: Invalid security certificates
Posted by: gordon451
Date: April 04, 2017 06:14PM

G'day paulderdash - You may want to consider that what Adguard is doing is actually a MITM attack, and as such is introducing a security hole in your system. Avast--and almost all security software--is also doing it now.

The Adguard Certificate will actually replace whatever Site Certificate is supposed to be presented to your browser. Read Security Week for more detail.

FWIW, I and many others disabled Avast WebShield for this reason, and I'm sure--with no research to back it up--that users of other AV systems have done the same. IMHO, no security system needs to fiddle with TLS which is our prime protection against MITM.

EDIT: Add reference.

____________________
Gigabyte H61M-USB3-B3 r2.0, I5-2400 3.10GHz, 4GB RAM; W7HPx64 SP1, Lotus SmartSuite 9.8, K-Meleon 76RC, Pale Moon 26.4.1, IE11, Clyton email 15.0, Foxit Reader 7.0.6.1126, PaintShop Pro 6.02, ZAM Free 2.74, SuRun 1.2.1.2, VoodooShield 3.59b

__________________
"Learning is not compulsory. Neither is survival." Dr. W. Edwards Deming.



Edited 2 time(s). Last edit at 04/04/2017 06:34PM by gordon451.

Options: ReplyQuote
Re: Invalid security certificates
Posted by: paulderdash
Date: April 07, 2017 06:26PM

OK I understand what is going on now.

The reinstall certificate soltion in Adguard does not work.
If I untick 'Filter HTTPS protocol' in AG all is OK.

I agree AV's etc. should not be the MITM ...

Options: ReplyQuote
Re: Invalid security certificates
Posted by: JohnHell
Date: April 07, 2017 09:52PM

Quote
paulderdash
The reinstall certificate soltion in Adguard does not work.


Have in mind that K-meleon is not firefox. What it does try to install it in Firefox, won't work in K-meleon.

Options: ReplyQuote


K-Meleon forum is powered by Phorum.