Level 1

4 points

Incorrect SSL certificates

One of my domains bucksccc.org.uk, moved to a new host last Thursday. A new secure SSL certificate was issued and the site is now working correctly on machines all over the globe, inc phones, tablets, PCs etc. The one place it is not is my Mac. On any browser, I am given an error message saying site is insecure and certificate is not trusted. When I view the certificate it is showing the old one. I also have Windows 10 on my Mac and the site is fine on that. It is an old mac running (OS High Sierra). I have cleared cache on all browsers, refreshed Firefox, uninstalled Avast Security, rebooted - you name it I have tried it (obviously except the fix!)

Thanks for ideas - Frank

iMac 21.5", macOS 10.13

Posted on Apr 13, 2020 3:19 AM

Similar questions

Showing SSL error for genuine sites (links from google search results) and then getting routed to spam advertising sites. I am facing this problem on both my iPhone and on my Macbook. The Safari is showing links for google search results as not having valid SSL certificates. When I click proceed to site, I get routed to this IP address always - http: //89.208.103.43. From there, the browser automatically shows many spam Advertising sites. This happens simultaneously on my iPhone as well as on my Macbook. This is only on Safari. If I use Microsoft Edge, this problem vanishes. When I go back to Safari, the same problem is seen. I have tried resetting the Safari on Iphone and clearing website data and cookies on Safari, Macbook. Still the problem somehow comes back. I am also worried about Malware or something like that installed in my devices. Please help. [Link Edited by Moderator]
8587 9

41 replies

fwsr Author

Level 1

4 points

Apr 15, 2020 9:56 AM in response to a brody

Thank you for that lesson, very instructive. i think i will have to do a reinstall, but on a machine so old, it has probably built up a lot of rubbish on it over the years. i will then start saving for a nice new machine. This one is 10 yrs old so has earned its keep.

If the new certificate works I will let you know, but will still probably do a reinstall.

Thanks

MrHoffman

Level 10

162,139 points

Apr 15, 2020 10:44 AM in response to a brody

a brody wrote:

MrHoffman. Avast has stopped as of January that nefarious practice. I saw the article which stated they realized they were mistaken in their procedures.

"Mistaken"? Avast either knew or should have known that this was a privacy disaster. They went ahead and did it anyway. They went ahead and implemented this, and sold access. That's a policy decision from Avast management, and not a "mistake". And if Avast management somehow didn't know this was a "mistake", that's arguably yet worse.

More recently than this "mistake", Avast had a privileged parser with untrusted input, and insecurely designed. "Despite being highly privileged and processing untrusted input by design, it is unsandboxed and has poor mitigation coverage. Any vulnerabilities in this process are critical, and easily accessible to remote attackers." This is a classic security design error, and the results of this error can and variously do introduce vulnerabilities into the app—and this error is a part of a security tool. A tool which will absolutely itself be targeted, too.

None of which engenders my trust in Avast.

a brody

Level 10

85,608 points

Apr 13, 2020 11:50 AM in response to BDAqua

BDAqua,

Do you know if these certificates work on older versions of Safari than the last Security Update?

fwsr Author

Level 1

4 points

Apr 13, 2020 1:37 PM in response to a brody

I tried again with certificates ‘Importing’ rather than ‘adding’ and certificate now says expires in 2022. But problem persists.

thanks

BDAqua

Level 10

251,565 points

Apr 13, 2020 1:37 PM in response to a brody

I know it works with versions of Safari in 10.13.6

fwsr Author

Level 1

4 points

Apr 13, 2020 1:41 PM in response to BDAqua

I VPN. I did have Avast installed but removed it, when trying to find a solution.

fwsr Author

Level 1

4 points

Apr 13, 2020 1:42 PM in response to fwsr

Sorry no VPN

fwsr Author

Level 1

4 points

Apr 14, 2020 2:52 AM in response to BDAqua

Thanks for help. Here is report. I notice it says 2 virus applications. I do use clean my Mac. But nothing else I am aware of. also worrying perhaps about hard drive failure.

Enjoy

Frank

fwsr Author

Level 1

4 points

Apr 14, 2020 3:02 AM in response to fwsr

Tried to open pastebin and strangely same error I am having 'Secure connection failed' PR_END_OF_FILE_ERROR

could this be an HTTPS thing?

Thanks

fwsr Author

Level 1

4 points

Apr 14, 2020 3:43 AM in response to fwsr

FWSR EtreCheck

Of course I run Rapport as well

fwsr Author

Level 1

4 points

Apr 14, 2020 5:17 AM in response to fwsr

Your views on this article also appreciated!!

fwsr Author

Level 1

4 points

Apr 14, 2020 5:56 AM in response to fwsr

https://sites.google.com/site/howtotellifyourmacishacked/is-etrecheck-malware

a brody

Level 10

85,608 points

Apr 14, 2020 8:48 AM in response to fwsr

No, you are not reading me correctly.

Trusteer is bad.

Avast is good.

Please just follow my 7 steps above.

fwsr Author

Level 1

4 points

Apr 14, 2020 8:54 AM in response to a brody

I am - thanks

a brody

Level 10

85,608 points

Apr 15, 2020 6:38 AM in response to fwsr

Let them know they need to use a different security certificate. It is possible the certificate you are using has been hacked.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Incorrect SSL certificates