{"id":30372,"date":"2019-10-31T21:35:13","date_gmt":"2019-10-31T18:35:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows\/"},"modified":"2019-10-31T21:35:13","modified_gmt":"2019-10-31T18:35:13","slug":"firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","title":{"rendered":"Firefox begyndte at importere rodcertifikater fra Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Firefox
\nFirefox' certifikatlager<\/i> <\/p>\n

Med udgivelsen af Mozilla Firefox 65 i februar 2019 bem\u00e6rkede nogle brugere ved forbindelse til HTTPS-sider fejl<\/a><\/noindex> som \"Din forbindelse er ikke sikker\" eller \"SEC_ERROR_UNKNOWN_ISSUER\". \u00c5rsagen viste sig at v\u00e6re antivirusprogrammer som Avast, Bitdefender og Kaspersky, der for at g\u00f8re MiTM-injektion i brugerens HTTPS-trafik installerer deres egne rodcertifikater p\u00e5 computeren. Og eftersom Firefox har sit eget certifikatlager, fors\u00f8ger de ogs\u00e5 at injicere sig selv i det.
\n<\/a><\/noindex>
\nBrowserudviklerne har l\u00e6nge opfordret<\/a><\/noindex> brugere til at undg\u00e5 installation af tredjeparts antivirusprogrammer, som forstyrrer browserens og andre programmers funktion, men den brede offentlighed lytter stadig ikke til opfordringerne. Desv\u00e6rre s\u00e6nker mange antivirusprogrammer, n\u00e5r de fungerer som et gennemsigtigt proxy, kvaliteten af den kryptografiske beskyttelse p\u00e5 klientcomputere. Til dette form\u00e5l udvikles der v\u00e6rkt\u00f8jer til at opdage HTTPS-mitmens<\/a><\/noindex>, som p\u00e5 serverens side identificerer tilstedev\u00e6relsen af MiTM, s\u00e5som antivirus, i kanalen mellem klienten og serveren.<\/p>\n

Under alle omst\u00e6ndigheder forstyrrede antivirusprogrammerne igen browserens funktion, og Firefox havde ikke andet valg end at l\u00f8se problemet p\u00e5 sin side. I browserens konfigurationer er der en indstilling security.enterprise_roots.enabled<\/b>. Hvis denne flag aktiveres, vil Firefox begynde at bruge Windows' certifikatlager til validering af SSL-forbindelser. Hvis nogen oplever de omtalte fejl ved bes\u00f8g p\u00e5 HTTPS-sider, kan man enten deaktivere scanning af SSL-forbindelser i antivirusprogrammet eller manuelt aktivere dette flag i browserens indstillinger.<\/p>\n

Problemet diskuteres<\/a><\/noindex> i Mozilla's bug tracker. Udviklerne besluttede at aktivere flaget security.enterprise_roots.enabled<\/b> som standard i eksperimentelt \u00f8jemed, s\u00e5 Windows' certifikatlager kunne bruges uden yderligere handling fra brugeren. Dette vil ske med version 66 af Firefox p\u00e5 Windows 8 og Windows 10-systemer, hvor tredjeparts antivirusprogrammer er installeret (det er kun muligt at identificere tilstedev\u00e6relsen af antivirus i systemet med API fra version Windows 8).
\n
Kilde: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox begyndte at importere rodcertifikater fra Windows | ProHoster","description":"Certifikatlager.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firefox \u043d\u0430\u0447\u0430\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u0437 Windows | ProHoster","og:description":"\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:13+00:00","article:modified_time":"2019-10-31T18:35:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30372","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:30:03","updated":"2026-01-21 00:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/30372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=30372"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/30372\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/22375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=30372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=30372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=30372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}