Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Certificate verification fails on sites with recently updated certs #1833

Open
Alex-302 opened this issue Dec 6, 2023 · 11 comments
Open

Certificate verification fails on sites with recently updated certs #1833

Alex-302 opened this issue Dec 6, 2023 · 11 comments

Comments

@Alex-302
Copy link
Member

Alex-302 commented Dec 6, 2023

Original reports Windows and Macos:
AdguardTeam/AdguardFilters#167902

AdGuard for Mac v2.12.2.1415 release
macOS Ventura
Chrome

AdGuard for Windows v7.15.1 (4386)
Yandex Browser


Reproduced in Macos 13.3 with AdGuard 2.12.1.1398
Not sure if it is related to UDP connections.

@zubrRB
Copy link

zubrRB commented Dec 6, 2023

Я с подобным сталкивался в версии 7.15.1 в момент обновления фильтров + в течение 8-10 минут после их обновления.

@Alex-302
Copy link
Member Author

Alex-302 commented Dec 7, 2023

@zubrRB А есть какие-нибудь проги, которые работают с сетью (антивирусы, фаерволы, отладчики)?
Можешь включить отладочное логирование и попытаться поймать момент когда отваливается фильтрация? Важно запомнить поточнее время, когда возникает проблема.
Лог нужно передать непублично.

@zubrRB
Copy link

zubrRB commented Dec 7, 2023

Это я сталкивался в 7.15.1 и всегда в такие момент замечал по трею, что это происходило после обновления фильтров.
Даже довелось отправить несколько ложных репортов на раздражители, хотя перезапускал Chrome и смотрел в Firefox. После обновления на тестовые сборки 7.16 x64 с аналогичным отвалом фильтрации пока не доводилось сталкиваться.

@jellizaveta
Copy link

AdguardTeam/AdguardFilters#167736
I'm having the same thing happen with AdGuard on Mac
Version 2.12.2.1415 release
CoreLibs version 1.12.83
AdGuard script is not injected to the page

@jellizaveta
Copy link

HTTPS filtering does not work, site does not accept AG certificate.
https://crictoday.com/cricket/daily-cricket-news/bcci-doesnt-want-day-night-test-matches-in-india/
AdGuard for Android v4.2.118
related issue: AdguardTeam/AdguardFilters#168269

@rakleed
Copy link

rakleed commented Dec 12, 2023

Problem with Let's Encrypt certificates.

@superlex
Copy link

superlex commented Dec 13, 2023

https://www.mistergadget.tech/ too

2023-12-13 02 30 50

AG for Android v4.2

@adguard-bot adguard-bot changed the title HTTPS filtering does not work kemono.su No filtering on sites with recently updated Let's Encrypt cert Dec 13, 2023
@sfionov sfionov changed the title No filtering on sites with recently updated Let's Encrypt cert Certificate verification fails on sites with recently updated certs Dec 13, 2023
@sfionov
Copy link
Member

sfionov commented Dec 13, 2023

Caused by the new "Certificate Transparency verification" code in CL1.12. It was added because AdGuard uses the same checks as browsers do, and Chrome does this check. However, there was error in implementation - expired CT log list was applied.

This problem will be fixed in the current release cycle, you may want to switch to beta to workaround this problem.

@superlex
Copy link

Thank you for the explanation, sfionov! 😊

@sfionov
Copy link
Member

sfionov commented Dec 14, 2023

Not closing until products are released

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

8 participants