AB-Solution webpage/antivirus problems

[TheLyppardMan]

I've just put AB-Solution on my RT-AC88U, but it's been throwing up tons of messages about invalid certificates in my antivirus software (ESET), so I've had to switch off https scanning to stop that happening (which additionally raises the question as to whether I'm putting my system at risk by doing that, although the AV hasn't shown any warnings). I'm still getting some warning messages in Firefox though, such as the one on a page on this forum, a screenshot of which I've going to upload with this message. Can anyone advise me please?

 

[skeal]

I've just put AB-Solution on my RT-AC88U, but it's been throwing up tons of messages about invalid certificates in my antivirus software (ESET), so I've had to switch off https scanning to stop that happening (which additionally raises the question as to whether I'm putting my system at risk by doing that, although the AV hasn't shown any warnings). I'm still getting some warning messages in Firefox though, such as the one on a page on this forum, a screenshot of which I've going to upload with this message. Can anyone advise me please?

You should move this post to the ab-solution thread.

 

[sentinelvdx]

I've just put AB-Solution on my RT-AC88U, but it's been throwing up tons of messages about invalid certificates in my antivirus software (ESET), so I've had to switch off https scanning to stop that happening (which additionally raises the question as to whether I'm putting my system at risk by doing that, although the AV hasn't shown any warnings). I'm still getting some warning messages in Firefox though, such as the one on a page on this forum, a screenshot of which I've going to upload with this message. Can anyone advise me please?

You have to disable TLS. I had the same issue. Adding the CA as exception to the A.V. config. does not work.
You should go to Advance Setup>Web & e-mail>TLS
And disable TLS

Sent from my SM-G965F using Tapatalk

 

[TheLyppardMan]

Yes, that's what I did, when I eventually found the setting in ESET. I have a feeling from what I remember that this is something to do with Pixelserv, so perhaps I ought to consider removing that (only trouble is, I assume that will allow a lot more ads).

 

[blueshark]

The same problem with eset. Disable tls is only solution

 

[TheLyppardMan]

I've tried an experiment, I've turned off Pixelserv and re-enabled SSL/TLS protocol filtering. Now, instead of a security warning, I get a different message (see image uploaded).

 

[sentinelvdx]

I've tried an experiment, I've turned off Pixelserv and re-enabled SSL/TLS protocol filtering. Now, instead of a security warning, I get a different message (see image uploaded).

But by disabling pixelserv you won't block https based ads

Sent from my SM-G965F using Tapatalk

 

[kfp]

But by disabling pixelserv you won't block https based ads

AB-Solution handles the block list, dnsmasq do the blocking/redirection, pixelserv to reply/serve a pixel so your HTTP request doesn’t time out.

That’s exactly what @TheLyppardMan is seeing in the browser, ads can’t load and timing out.

 

[kfp]

I've just put AB-Solution on my RT-AC88U, but it's been throwing up tons of messages about invalid certificates in my antivirus software (ESET)

I’m not familiar with how ESET is checking for cert validity, are you also seeing cert errors in the browser?

Have you done this step after installing ab-solution?
https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate

 

[TheLyppardMan]

I’m not familiar with how ESET is checking for cert validity, are you also seeing cert errors in the browser?

Have you done this step after installing ab-solution?
https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate

Yes, I get the first message if I leave SSL/TLS filtering turned on in ESET (+ constants security alert popups from ESET, asking me make a decison). I'll try turning Pixelserv back on but leave SSL/TLS disabled in ESET and see what happens. I'll report back in a few minutes.

 

[TheLyppardMan]

OK, with Pixelserve back on and SSL/TLS disabled in ESET, I get this...

I don't know how the do the certificates thingy above, so if I need to do that, could someone simplify the procedure for me?

 

[kfp]

The link I gave you already have step by step instructions..

Start here https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices

 

[skeal]

OK, with Pixelserve back on and SSL/TLS disabled in ESET, I get this...

I don't know how the do the certificates thingy above, so if I need to do that, could someone simplify the procedure for me?

Try this it worked for me. https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI

 

[kfp]

Try this it worked for me. https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI

That won’t solve the cert error issue. CA needs to be imported to client devices.

 

[TheLyppardMan]

The link I gave you already have step by step instructions..

Start here https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices

Well, I followed the link but all I saw was a list of things that mean absolutely nothing to me and if I then scroll down to the bit under firefox and try to visit http://pixelserv ip/ca.crt, all I get is a list of search results in Google...

 

[Jack Yaz]

Well, I followed the link but all I saw was a list of things that mean absolutely nothing to me and if I then scroll down to the bit under firefox and try to visit http://pixelserv ip/ca.crt, all I get is a list of search results in Google...

That's because you have to replace "pixelserv ip" with the IP address for your pixelserv install. If you run ab-solution then open it, the menu displays the IP pixelserv is running on.

 

[TheLyppardMan]

That's because you have to replace "pixelserv ip" with the IP address for your pixelserv install. If you run ab-solution then open it, the menu displays the IP pixelserv is running on.

OK thanks, I'll try that tomorrow. And what about all the other code at the top of the page - Am I supposed to do something with that and if so, what?

 

[Jack Yaz]

OK thanks, I'll try that tomorrow. And what about all the other code at the top of the page - Am I supposed to do something with that and if so, what?

No, AB-Solution generates it on your behalf, all you need to do is download it to each device and import it.

 

[TheLyppardMan]

It seems to be working OK on my PC, although I still need to keep the SSL/TLS feature switched off in ESET to avoid being inundated with popups about untrusted certificates.

 

[TheLyppardMan]

Update: I'm still seeing some warnings in Firefox (see screenshot).