Jump to content

Recommended Posts

Hello!

 

New open SSL is available for beta-testing

 

Planned release date:

Feb 8 2016

 

Changes:

Update open SSL, bugfix

 

Files (placed in installation directory) :

- ssleay32.dll 1.0.2.5 (md5: f3078db35a2b5c4f8895903fd73e5f5f)

- libeay32.dll 1.0.2.5 (md5: deff52badfbf865505e8c7f6ed70499e)

 

Update source:

http://dnl-test.kaspersky-labs.com/test/iro

It's necessary to restart product to apply the update.

 

Testing FAQ:

http://forum.kaspersky.com/index.php?showtopic=343583

Share this post


Link to post

Testing in System 3 (see signature) + KTS2016MR1 16.0.1.445 Technical Preview.

 

- Try to download the eicar http://www.eicar.org/ using the secure, SSL enabled protocol https - the product must block this action: PASSED.

 

- Surf the trusted popular Internet resources by https - no false detection or performance degradation are expected: PASSED.

 

- Check the 'Safe Browser' feature - no problems with opening https pages are expected: PASSED.

 

But still I'm getting this issue: http://forum.kaspersky.com/index.php?showtopic=343647 with IE11, Edge and Chrome when visiting FaceBook site. The only workaround is to pause protection, or creating an exclusion (in Specify Trusted Applications) for Chrome/IE/Edge -> do not scan encrypted traffic.

 

It seems something wrong with Kaspersky Root Certificate/encrypted traffic.

 

In Mozilla FireFox 44 works fine.

Edited by harlan4096

Share this post


Link to post
Testing in System 3 (see signature) + KTS2016MR1 16.0.1.445 Technical Preview.

 

- Try to download the eicar http://www.eicar.org/ using the secure, SSL enabled protocol https - the product must block this action: PASSED.

 

- Surf the trusted popular Internet resources by https - no false detection or performance degradation are expected: PASSED.

 

- Check the 'Safe Browser' feature - no problems with opening https pages are expected: PASSED.

 

But still I'm getting this issue: http://forum.kaspersky.com/index.php?showtopic=343647 with IE11, Edge and Chrome when visiting FaceBook site. The only workaround is to pause protection, or creating an exclusion (in Specify Trusted Applications) for Chrome/IE/Edge -> do not scan encrypted traffic.

 

It seems something wrong with Kaspersky Root Certificate/encrypted traffic.

 

In Mozilla FireFox 44 works fine.

 

Thank you for reply!

We've just updated traffic processing config at the test update source http://dnl-test.kaspersky-labs.com/test/iro .

Please check again if the problem can still be reproduced.

 

Share this post


Link to post

Issue still there... I've updated and restart the system and tested again with the 3 affected browsers...

 

Most of the times FaceBook page takes so long to appear and start loading... but never finishes, sometimes starts loading but stuck.

 

After typing user/password takes looooong to respond. And sometimes browser says cookies are not enabled, which is not truth!.

 

post-5997-1454069658_thumb.png post-5997-1454069663_thumb.png post-5997-1454069931_thumb.png post-5997-1454070070_thumb.png

 

Traces for IE, Edge & Chrome: http://cloud.s-evil.ru/index.php/s/c9H3C3r5zVkHIMZ

Edited by harlan4096

Share this post


Link to post
Issue still there... I've updated and restart the system and tested again with the 3 affected browsers...

 

Ok, we'll continue the investigation.

And one more question - can the issue be reproduced after updating from public source (if you specify http://dnl-01.geo.kaspersky.com) and restarting the product?

If it could, it would be an open SSL issue.

Share this post


Link to post
After go back to standard server updates, issue still there...

 

We have a solution that works in our labs:

1. Update from http://dnl-test.kaspersky-labs.com/test/iro again, restart product.

2. Go to Settings-Additional-Network. Change 'Encrypted connections scanning' to 'Do not scan encrypted connections'.

3. Try to browse facebook.com again - now it should be loaded quickly.

4. Change the setting in step2 back to its default value (or to 'Always scan').

5. Check the issue again.

 

So, the issue is fixed after resetting encryption connection scanning option only.

Share this post


Link to post

I've done it for every of the affected browsers (Chrome, IE & Edge).

 

With Chrome worked fine! but still not working here in Edge or IE, disabled encrypted scanning FaceBook is loaded fast in Edge or IE, but closing browsers and re-enabling scanning encrypted connection, I got again the same issue in both...

Edited by harlan4096

Share this post


Link to post
I've done it for every of the affected browsers (Chrome, IE & Edge).

 

With Chrome worked fine! but still not working here in Edge or IE, disabled encrypted scanning FaceBook is loaded fast in Edge or IE, but closing browsers and re-enabling scanning encrypted connection, I got again the same issue in both...

 

We've released a new traffic processing config at the test update source http://dnl-test.kaspersky-labs.com/test/iro .

 

Please check again after updating from the test source and product restarting.

Share this post


Link to post

Thanks! I just got it and updating from Patch A beta to test! :) it will be this fix in that Patch also as it says?:

Fixes:

• Chrome can't load Facebook page if encrypted connection scan is enabled

• Total Force Upgrade

• Other internal error

Edited by harlan4096

Share this post


Link to post

Ok! I will try Patch A and Your new fix from both test servers!.

Edited by harlan4096

Share this post


Link to post

Ok, I've tested Patch A, which fixes the issue in the 3 browsers.

 

Then I've reverted to standard updates, and updated from /iro and also is working even better, because with Patch A there is a small section called "Your sites/pages" in Top Right Corner of my FaceBook profile that was not loaded (unless I turn off Anti-Banner module), and now with the new update from /iro is loaded even with Anti-Banner on :bravo:

Edited by harlan4096

Share this post


Link to post
Guest
This topic is now closed to further replies.

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.