Re: SeaMonkey 2.48 Certificates

[Frank-Rainer Grahl]

In 99% of all cases always the same. Virus scanner acts as a man in the middle 
and intercepts https traffic. You need to disable it or install the virus 
scanner certificate(s) in SeaMonkey. There were enough cases discussed here. 
Just use search or ask for support wrt. your virus scanner.


FRG

w.wij...@gmail.com wrote:

Op zondag 27 augustus 2017 06:42:59 UTC+2 schreef David E. Ross:

On 8/26/2017 9:17 PM, David Guymer wrote:

David Guymer wrote:

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account


Another important site that won't load is
https://my.gov.au/LoginServices/main/login?execution=e1s1

David Guymer



Windows 7
SeaMonkey 2.48

That one loaded okay.  The site certificate for www.my.gov.au is owned
by the Australian Department of Human Services.  It and the intermediate
certificate were properly installed on the www.my.gov.au server.  Both
successfully chained to the DigiCert High Assurance EV Root CA
certificate, which was installed on my PC with SeaMonkey.

It is possible that your file of root certificates has become corrupted.
  To restore it, I suggest the following:

1.  On the SeaMonkey menu bar, select [Help > Troubleshooting
Information].

2.  Under "Application Basics", select the Open Folder button to the
right of Profile Folder.

3.  Terminate all instances of SeaMonkey.

4.  In the profile folder opened in #2, locate the file cert8.db and
delete it.

5.  Relaunch SeaMonkey (which re-creates cert8.db) and try your problem
Web sites again.

If you truly trust the Australian government's Web sites (why not?), you
might also try disabling Kaspersky just before attempting to access
those sites.  Remember to enable Kaspersky afterwards.

--
David E. Ross





I use 2.49.3 and Bullguard, and I have the EXAT same issues as descrbed by OP, 
so I tried these steps (locate the file cert8.db and delete it, reboot SM), 
same issues persists

IS THERE A SOLUTION OR NOT??


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[w . wijmer]

Op zondag 27 augustus 2017 06:42:59 UTC+2 schreef David E. Ross:
> On 8/26/2017 9:17 PM, David Guymer wrote:
> > David Guymer wrote:
> >> David E. Ross wrote:
> >>> On 8/26/2017 12:34 AM, David Guymer wrote:
>  There is something wrong with SeaMonkey 2.48.Every page I go to I get a
>  certificate warning.
> 
>  I have aspersky Total Security 18.0. I have imported the Certificate
>  from this program with the same warning afterwards.
> 
>  All other browswers are unaffected. News and mail are unaffected in
>  SeaMonkey.
> 
>  David Guymer
> 
> >>>
> >>> Give us a link to an affected Web page, a page that does not require a
> >>> login to an account that I do not have.
> >>>
> >>
> >> https://www.foxtel.com.au/my-account
> > 
> > Another important site that won't load is 
> > https://my.gov.au/LoginServices/main/login?execution=e1s1
> > 
> > David Guymer
> > 
> 
> Windows 7
> SeaMonkey 2.48
> 
> That one loaded okay.  The site certificate for www.my.gov.au is owned
> by the Australian Department of Human Services.  It and the intermediate
> certificate were properly installed on the www.my.gov.au server.  Both
> successfully chained to the DigiCert High Assurance EV Root CA
> certificate, which was installed on my PC with SeaMonkey.
> 
> It is possible that your file of root certificates has become corrupted.
>  To restore it, I suggest the following:
> 
> 1.  On the SeaMonkey menu bar, select [Help > Troubleshooting
> Information].
> 
> 2.  Under "Application Basics", select the Open Folder button to the
> right of Profile Folder.
> 
> 3.  Terminate all instances of SeaMonkey.
> 
> 4.  In the profile folder opened in #2, locate the file cert8.db and
> delete it.
> 
> 5.  Relaunch SeaMonkey (which re-creates cert8.db) and try your problem
> Web sites again.
> 
> If you truly trust the Australian government's Web sites (why not?), you
> might also try disabling Kaspersky just before attempting to access
> those sites.  Remember to enable Kaspersky afterwards.
> 
> -- 
> David E. Ross
> 



I use 2.49.3 and Bullguard, and I have the EXAT same issues as descrbed by OP, 
so I tried these steps (locate the file cert8.db and delete it, reboot SM), 
same issues persists 

IS THERE A SOLUTION OR NOT?? 
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David E. Ross]

On 9/10/2017 2:03 AM, David Guymer wrote:
> Another site that SeaMonkey 2.48 won't let me gp tp is 
> https://www.seamonkey-project.org/start/
> 
> That version is rediculas tide up.
> 
> When will the next version be releast? I wonder if SeaMonkey 2.48 will 
> allow updates?
> 
> Very frustrated.
> 
> David Guymer
> 

gp??  tp??

-- 
David E. Ross


Yes, George Washington, Thomas Jefferson, and other
"founding fathers" owned slaves.  However, they created
a nation.  Robert E. Lee, Jefferson Davis, Thomas
"Stonewall" Jackson and other "heroes" of the
Confederacy tried to tear the nation apart.  Statues
and other monuments to those "heroes" of the
Confederacy actually celebrate traitors and treason.

See my .
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David Guymer]

Daniel wrote:

On 28/08/2017 1:26 AM, Lee wrote:

On 8/27/17, Daniel  wrote:

On 27/08/2017 2:17 PM, David Guymer wrote:

David Guymer wrote:

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I
get
a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not
require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account


Another important site that won't load is
https://my.gov.au/LoginServices/main/login?execution=e1s1

David Guymer


My SM 2.48 gets me to the my.gov.au "Secret Question" page  just
like it has done for years!!


Unless you've got Kaspersky installed on your machine & configured to
check all web traffic your situation is totally different.

see, for example,
https://bugs.chromium.org/p/project-zero/issues/detail?id=978
  Kasperky installs a WFP driver to intercept all outgoing HTTPS
connections. They effectively proxy SSL connections, inserting their
own certificate as a trusted authority in the system store and then
replace all leaf certificates on-the-fly. This is why if you examine a
certificate when using Kaspersky Antivirus, the issuer appears to be
"Kaspersky Anti-Virus Personal Root".

Lee


Ah!! No Kasperky, so Sorry for distracting you.

Daniel

Another site that SeaMonkey 2.48 won't let me gp tp is 
https://www.seamonkey-project.org/start/


That version is rediculas tide up.

When will the next version be releast? I wonder if SeaMonkey 2.48 will 
allow updates?


Very frustrated.

David Guymer
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Daniel]

On 28/08/2017 1:26 AM, Lee wrote:

On 8/27/17, Daniel  wrote:

On 27/08/2017 2:17 PM, David Guymer wrote:

David Guymer wrote:

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get
a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account


Another important site that won't load is
https://my.gov.au/LoginServices/main/login?execution=e1s1

David Guymer


My SM 2.48 gets me to the my.gov.au "Secret Question" page  just
like it has done for years!!


Unless you've got Kaspersky installed on your machine & configured to
check all web traffic your situation is totally different.

see, for example,  https://bugs.chromium.org/p/project-zero/issues/detail?id=978
  Kasperky installs a WFP driver to intercept all outgoing HTTPS
connections. They effectively proxy SSL connections, inserting their
own certificate as a trusted authority in the system store and then
replace all leaf certificates on-the-fly. This is why if you examine a
certificate when using Kaspersky Antivirus, the issuer appears to be
"Kaspersky Anti-Virus Personal Root".

Lee


Ah!! No Kasperky, so Sorry for distracting you.

Daniel

--
Daniel

User agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 
SeaMonkey/2.48 Build identifier: 20170329183526

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Lee]

On 8/27/17, Daniel  wrote:
> On 27/08/2017 2:17 PM, David Guymer wrote:
>> David Guymer wrote:
>>> David E. Ross wrote:
 On 8/26/2017 12:34 AM, David Guymer wrote:
> There is something wrong with SeaMonkey 2.48.Every page I go to I get
> a
> certificate warning.
>
> I have aspersky Total Security 18.0. I have imported the Certificate
> from this program with the same warning afterwards.
>
> All other browswers are unaffected. News and mail are unaffected in
> SeaMonkey.
>
> David Guymer
>

 Give us a link to an affected Web page, a page that does not require a
 login to an account that I do not have.

>>>
>>> https://www.foxtel.com.au/my-account
>>
>> Another important site that won't load is
>> https://my.gov.au/LoginServices/main/login?execution=e1s1
>>
>> David Guymer
>
> My SM 2.48 gets me to the my.gov.au "Secret Question" page  just
> like it has done for years!!

Unless you've got Kaspersky installed on your machine & configured to
check all web traffic your situation is totally different.

see, for example,  https://bugs.chromium.org/p/project-zero/issues/detail?id=978
  Kasperky installs a WFP driver to intercept all outgoing HTTPS
connections. They effectively proxy SSL connections, inserting their
own certificate as a trusted authority in the system store and then
replace all leaf certificates on-the-fly. This is why if you examine a
certificate when using Kaspersky Antivirus, the issuer appears to be
"Kaspersky Anti-Virus Personal Root".

Lee
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Daniel]

On 27/08/2017 2:17 PM, David Guymer wrote:

David Guymer wrote:

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account


Another important site that won't load is
https://my.gov.au/LoginServices/main/login?execution=e1s1

David Guymer


My SM 2.48 gets me to the my.gov.au "Secret Question" page  just 
like it has done for years!!


--
Daniel

User agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 
SeaMonkey/2.48 Build identifier: 20170329183526

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Lee]

On 8/27/17, David Guymer  wrote:
> Paul B. Gallagher wrote:
>> David Guymer wrote:
>>
>>> Another important site that won't load is
>>> 
>>
>> Works fine here in the Untied States.
>>
> Strange. I didn't think it was acessible outside of Australia.
>
> It still is reported as having an invalid certificate for me.

Can you look at the certificate?  If the issuer is "Kaspersky
Anti-Virus Personal Root" and you've already tried reinstalling their
root cert your best bet might be opening a support ticket w/ kaspersky

Lee
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David Guymer]

Paul B. Gallagher wrote:

David Guymer wrote:


Another important site that won't load is



Works fine here in the Untied States.


Strange. I didn't think it was acessible outside of Australia.

It still is reported as having an invalid certificate for me.

Windows 10 Insider Preveiw Build 16275

David Guymer
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Paul B. Gallagher]

David Guymer wrote:


Another important site that won't load is



Works fine here in the Untied States.

--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David E. Ross]

On 8/26/2017 9:17 PM, David Guymer wrote:
> David Guymer wrote:
>> David E. Ross wrote:
>>> On 8/26/2017 12:34 AM, David Guymer wrote:
 There is something wrong with SeaMonkey 2.48.Every page I go to I get a
 certificate warning.

 I have aspersky Total Security 18.0. I have imported the Certificate
 from this program with the same warning afterwards.

 All other browswers are unaffected. News and mail are unaffected in
 SeaMonkey.

 David Guymer

>>>
>>> Give us a link to an affected Web page, a page that does not require a
>>> login to an account that I do not have.
>>>
>>
>> https://www.foxtel.com.au/my-account
> 
> Another important site that won't load is 
> https://my.gov.au/LoginServices/main/login?execution=e1s1
> 
> David Guymer
> 

Windows 7
SeaMonkey 2.48

That one loaded okay.  The site certificate for www.my.gov.au is owned
by the Australian Department of Human Services.  It and the intermediate
certificate were properly installed on the www.my.gov.au server.  Both
successfully chained to the DigiCert High Assurance EV Root CA
certificate, which was installed on my PC with SeaMonkey.

It is possible that your file of root certificates has become corrupted.
 To restore it, I suggest the following:

1.  On the SeaMonkey menu bar, select [Help > Troubleshooting
Information].

2.  Under "Application Basics", select the Open Folder button to the
right of Profile Folder.

3.  Terminate all instances of SeaMonkey.

4.  In the profile folder opened in #2, locate the file cert8.db and
delete it.

5.  Relaunch SeaMonkey (which re-creates cert8.db) and try your problem
Web sites again.

If you truly trust the Australian government's Web sites (why not?), you
might also try disabling Kaspersky just before attempting to access
those sites.  Remember to enable Kaspersky afterwards.

-- 
David E. Ross


Yes, George Washington, Thomas Jefferson, and other
"founding fathers" owned slaves.  However, they created
a nation.  Robert E. Lee, Jefferson Davis, Thomas
"Stonewall" Jackson and other "heroes" of the
Confederacy tried to tear the nation apart.  Statues
and other monuments to those "heroes" of the
Confederacy actually celebrate traitors and treason.

See my .
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David E. Ross]

On 8/26/2017 8:01 PM, David Guymer wrote:
> David E. Ross wrote:
>> On 8/26/2017 12:34 AM, David Guymer wrote:
>>> There is something wrong with SeaMonkey 2.48.Every page I go to I get a
>>> certificate warning.
>>>
>>> I have aspersky Total Security 18.0. I have imported the Certificate
>>> from this program with the same warning afterwards.
>>>
>>> All other browswers are unaffected. News and mail are unaffected in
>>> SeaMonkey.
>>>
>>> David Guymer
>>>
>>
>> Give us a link to an affected Web page, a page that does not require a
>> login to an account that I do not have.
>>
> 
> https://www.foxtel.com.au/my-account
> 

I get: "Access to My Account is not currently available outside
Australia."  This was via a redirect to
, which --
being an HTTP page and not HTTPS -- does not have a certificate.

-- 
David E. Ross


Yes, George Washington, Thomas Jefferson, and other
"founding fathers" owned slaves.  However, they created
a nation.  Robert E. Lee, Jefferson Davis, Thomas
"Stonewall" Jackson and other "heroes" of the
Confederacy tried to tear the nation apart.  Statues
and other monuments to those "heroes" of the
Confederacy actually celebrate traitors and treason.

See my .
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David Guymer]

David Guymer wrote:

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account


Another important site that won't load is 
https://my.gov.au/LoginServices/main/login?execution=e1s1


David Guymer
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David Guymer]

David E. Ross wrote:

On 8/26/2017 12:34 AM, David Guymer wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.

All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer



Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.



https://www.foxtel.com.au/my-account
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[PhillipJones]

Lee wrote:

On 8/26/17, David Guymer  wrote:

There is something wrong with SeaMonkey 2.48.Every page I go to I get a
certificate warning.

I have aspersky Total Security 18.0. I have imported the Certificate
from this program with the same warning afterwards.


It sounds like the cert wasn't imported - or maybe it wasn't imported
into the right place?
edit / preferences
privacy & security / certificates / manage certificates
authorities

do you see the Kaspersky cert there?

but before clicking on import take a look at
  https://www.us-cert.gov/ncas/alerts/TA17-075A
Allowing your a/v program to inspect traffic from https sites might be
desirable but be aware of the trade-offs.

Lee




All other browswers are unaffected. News and mail are unaffected in
SeaMonkey.

David Guymer
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey



I can't even get 2.48 to work MacBook Pro Bought in Feb 2017 16 GB RAM 
SSD Drive OSX12.6 After updating from 2.46 to 2.48. Crashed hard. 
Fortunately I  went back to 2.46 using time Machine. Works Perfect.  The 
last couple of updates for Mac have been Stinkers.


--
Phillip M. Jones, C.E.T.  "If it's Fixed, Don't Break it"
http://www.phillipmjones.netmailto:pjones...@comcast.net
http://phillipjones-cet.net/
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[Lee]

On 8/26/17, David Guymer  wrote:
> There is something wrong with SeaMonkey 2.48.Every page I go to I get a
> certificate warning.
>
> I have aspersky Total Security 18.0. I have imported the Certificate
> from this program with the same warning afterwards.

It sounds like the cert wasn't imported - or maybe it wasn't imported
into the right place?
edit / preferences
privacy & security / certificates / manage certificates
authorities

do you see the Kaspersky cert there?

but before clicking on import take a look at
  https://www.us-cert.gov/ncas/alerts/TA17-075A
Allowing your a/v program to inspect traffic from https sites might be
desirable but be aware of the trade-offs.

Lee


>
> All other browswers are unaffected. News and mail are unaffected in
> SeaMonkey.
>
> David Guymer
> ___
> support-seamonkey mailing list
> support-seamonkey@lists.mozilla.org
> https://lists.mozilla.org/listinfo/support-seamonkey
>
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Re: SeaMonkey 2.48 Certificates

[David E. Ross]

On 8/26/2017 12:34 AM, David Guymer wrote:
> There is something wrong with SeaMonkey 2.48.Every page I go to I get a 
> certificate warning.
> 
> I have aspersky Total Security 18.0. I have imported the Certificate 
> from this program with the same warning afterwards.
> 
> All other browswers are unaffected. News and mail are unaffected in 
> SeaMonkey.
> 
> David Guymer
> 

Give us a link to an affected Web page, a page that does not require a
login to an account that I do not have.

-- 
David E. Ross


Yes, George Washington, Thomas Jefferson, and other
"founding fathers" owned slaves.  However, they created
a nation.  Robert E. Lee, Jefferson Davis, Thomas
"Stonewall" Jackson and other "heroes" of the
Confederacy tried to tear the nation apart.  Statues
and other monuments to those "heroes" of the
Confederacy actually celebrate traitors and treason.

See my .
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

SeaMonkey 2.48 Certificates

[David Guymer]

There is something wrong with SeaMonkey 2.48.Every page I go to I get a 
certificate warning.


I have aspersky Total Security 18.0. I have imported the Certificate 
from this program with the same warning afterwards.


All other browswers are unaffected. News and mail are unaffected in 
SeaMonkey.


David Guymer
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey