{"id":30372,"date":"2019-10-31T21:35:13","date_gmt":"2019-10-31T18:35:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows\/"},"modified":"2019-10-31T21:35:13","modified_gmt":"2019-10-31T18:35:13","slug":"firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","title":{"rendered":"Firefox b\u00f6rjade importera rotcertifikat fr\u00e5n Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Firefox
\nFirefox-certifikatf\u00f6rr\u00e5d<\/i> <\/p>\n

Med lanseringen av Mozilla Firefox 65 i februari 2019 b\u00f6rjade vissa anv\u00e4ndare vid anslutning till HTTPS-webbplatser m\u00e4rka fel<\/a><\/noindex> som \"Din anslutning \u00e4r inte s\u00e4ker\" eller \"SEC_ERROR_UNKNOWN_ISSUER\". Orsaken visade sig vara antivirusprogram som Avast, Bitdefender och Kaspersky, som installerar sina egna rotcertifikat p\u00e5 datorn f\u00f6r MiTM-injektion i anv\u00e4ndarens HTTPS-trafik. Eftersom Firefox har ett eget certifikatf\u00f6rr\u00e5d, f\u00f6rs\u00f6ker de ocks\u00e5 injicera sig i det.
\n<\/a><\/noindex>
\nWebbl\u00e4sarutvecklare har l\u00e4nge uppmanat<\/a><\/noindex> anv\u00e4ndare att avst\u00e5 fr\u00e5n att installera tredje parts antivirusprogram som st\u00f6r webbl\u00e4sarens och andra programmets funktionalitet, men den breda publiken lyssnar fortfarande inte p\u00e5 dessa uppmaningar. Tyv\u00e4rr, n\u00e4r m\u00e5nga antivirusprogram fungerar som en transparent proxy, minskar de kvaliteten p\u00e5 den kryptografiska skyddet p\u00e5 klientdatorer. I syfte att konstruera verktyg f\u00f6r att uppt\u00e4cka HTTPS-avlyssning<\/a><\/noindex>, som p\u00e5 serversidan identifierar f\u00f6rekomsten av MiTM, s\u00e5som antivirusprogram, i kanalen mellan klient och server.<\/p>\n

Hur som helst, men i detta fall hindrade antivirusprogram \u00e5terigen webbl\u00e4sarens drift, och Firefox hade inget annat val \u00e4n att l\u00f6sa problemet fr\u00e5n sin sida. Det finns en inst\u00e4llning i webbl\u00e4sarens konfigurationer security.enterprise_roots.enabled<\/b>. Om du aktiverar denna flagg kommer Firefox att b\u00f6rja anv\u00e4nda Windows certifikatf\u00f6rr\u00e5d f\u00f6r att validera SSL-anslutningar. Om n\u00e5gon f\u00e5r de ovan n\u00e4mnda felen vid bes\u00f6k p\u00e5 HTTPS-webbplatser kan man antingen st\u00e4nga av skanningen av SSL-anslutningar i antivirusprogrammet, eller manuellt st\u00e4lla in denna flagg i webbl\u00e4sarens inst\u00e4llningar.<\/p>\n

Problemet diskuteras<\/a><\/noindex> i Mozillas buggrapport. Utvecklarna har beslutat att experimentellt aktivera flaggen security.enterprise_roots.enabled<\/b> som standard, s\u00e5 att Windows certifikatf\u00f6rr\u00e5d anv\u00e4nds utan ytterligare \u00e5tg\u00e4rder fr\u00e5n anv\u00e4ndarens sida. Detta kommer att ske med version 66 av Firefox p\u00e5 Windows 8 och Windows 10-system d\u00e4r tredje parts antivirusprogram \u00e4r installerade (att identifiera f\u00f6rekomsten av antivirusprogram i systemet till\u00e5ter API bara fr\u00e5n version Windows 8).
\n
K\u00e4lla: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox b\u00f6rjade importera rotcertifikat fr\u00e5n Windows | ProHoster","description":"Certifikatf\u00f6rr\u00e5det.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firefox \u043d\u0430\u0447\u0430\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u0437 Windows | ProHoster","og:description":"\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:13+00:00","article:modified_time":"2019-10-31T18:35:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30372","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:30:03","updated":"2026-01-21 00:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/30372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=30372"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/30372\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/22375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=30372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=30372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=30372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}