{"id":30372,"date":"2019-10-31T21:35:13","date_gmt":"2019-10-31T18:35:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows\/"},"modified":"2019-10-31T21:35:13","modified_gmt":"2019-10-31T18:35:13","slug":"firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","title":{"rendered":"Firefox has started importing root certificates from Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Firefox
\nFirefox Certificate Store<\/i> <\/p>\n

With the release of Mozilla Firefox 65 in February 2019, some users connecting to HTTPS websites began noticing errors<\/a><\/noindex> like \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. The reason turned out to be antivirus programs like Avast, Bitdefender, and Kaspersky, which install their root certificates on users' computers for MiTM injection into HTTPS traffic. Since Firefox has its own certificate store, they also try to inject into it.
\n<\/a><\/noindex>
\nBrowser developers have long urged<\/a><\/noindex> users to refrain from installing third-party antivirus programs that interfere with the operation of browsers and other software, but the general public is still not heeding these calls. Unfortunately, by acting as a transparent proxy, many antivirus programs reduce the quality of cryptographic protection on client computers. For this purpose, HTTPS interception detection tools<\/a><\/noindex>, which determine the presence of MiTM, such as antivirus, on the server side within the channel between client and server.<\/p>\n

One way or another, in this case, antivirus programs again interfered with the operation of the browser, and Firefox had no choice but to address the issue from its side. In the browser's configs, there is a setting security.enterprise_roots.enabled<\/b>. If this flag is activated, Firefox will start using the Windows certificate store for validating SSL connections. If someone encounters the aforementioned errors when visiting HTTPS sites, they can either disable SSL connection scanning in the antivirus or manually set this flag in the browser settings.<\/p>\n

The Problem discussed<\/a><\/noindex> in Mozilla's bug tracker. The developers decided to temporarily activate the flag security.enterprise_roots.enabled<\/b> by default so that the Windows certificate store could be used without any action from the user. This will happen with Firefox 66 on Windows 8 and Windows 10 systems where third-party antivirus programs are installed (the ability to detect antivirus presence in the system via the API is only available from Windows 8).
\n
Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox starts importing root certificates from Windows | ProHoster","description":"Certificate Store.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firefox \u043d\u0430\u0447\u0430\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u0437 Windows | ProHoster","og:description":"\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:13+00:00","article:modified_time":"2019-10-31T18:35:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30372","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:30:03","updated":"2026-01-21 00:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/30372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=30372"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/30372\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/22375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=30372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=30372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=30372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}