internet google not working/giving "unsecure" error messages

[ik9000]

will post pics tomorrow - can't access image shack. Firefox wont do google searches. It spits out

This Connection is Untrusted

You have asked Firefox to connect securely to www.google.com, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

www.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is not trusted. (Error code: sec_error_untrusted_issuer)

It started going funny the other night, trying to send everything to ipv4.google.com, now it doesn't even get that far.

I've tried uninstalling firefox + reinstalling, purging web historys, flushing the DNS, resetting the router, even done a gooredfix and TDSSKiller for good measure. Still problems

Also firefox mozilla pages eg add-on search page either won't open, or open in really weird text-only versions like something from 1995

Internet explorer google searches also odd too. Only search from toolbar seems to do anything (and that via a redirect=ipv4.google.com) clicking the "search" button on the webpage itself causes hang/no response, or typing in the page search box and hitting enter gets the same non-response problem.

So basically google is screwed on my machine. Bing is fine in IE and Firefox.

So, what should I do?

[ik9000]

oh and i get the same error messages with imageshack

[watercooled]

Is it something affecting all HTTPS sites by any chance?

[ik9000]

Is it something affecting all HTTPS sites by any chance?

seems to be with firefox yes

but the hang thing in IE when I seach in google webpage, that is most odd.

[ik9000]

just like to point out this only started 2 days ago. Everything was fine before then. Not installed anything. I can't recall if I download adblock+ add on for firefox before or after this started. It seems to be a legit add-on from the researching I did. Can't find a record of it on the system now, so presume it was removed when FF was uninstalled?

Only other thing I installed in recent weeks was the Netextender Sonicwall thing to allow me to remote access a work network. Be surprised if that is the cause as it worked fine for the week or so afterwards until this flared up.

[watercooled]

It sounds possible that something is trying to act as an intermediary between your system and the net - some workplaces will intercept and decrypt https traffic in order to monitor/filter it the same way as normal http traffic, but this requires their own certificates be installed on the client systems so the browsers don't refuse to connect. A VPN could cause this.

What SHA1 fingerprint do you get for the certificate of https://www.wikipedia.org (assuming you can connect)?

I get DA:AA:A4:9B:AD:0C:1F:A3:29:71:D8:CC:62:BA:72:D1:A4:DB:94:9F - it should match.

[ik9000]

It sounds possible that something is trying to act as an intermediary between your system and the net - some workplaces will intercept and decrypt https traffic in order to monitor/filter it the same way as normal http traffic, but this requires their own certificates be installed on the client systems so the browsers don't refuse to connect. A VPN could cause this.

What SHA1 fingerprint do you get for the certificate of https://www.wikipedia.org (assuming you can connect)?

I get DA:AA:A4:9B:AD:0C:1F:A3:29:718:CC:62:BA:721:A4B:94:9F - it should match.

work machine is fine on the same websites same browser using https - it is my home machine that is up the creek. I will try this when I get home tonight.

[watercooled]

That's my point though, the work system may have the intermediary certificates installed so https traffic can be intercepted. If so, that could also be confirmed by comparing the fingerprint, as it's not realistically possible to spoof those.

Of course it would only apply to the home system if it's tunnelling all web traffic through the VPN though.

[stilkun]

I think uninstalling and reinstalling FireFox creates new profile with no extension but leaves old profiles behind with extension in there. Ad Block Plus usually download filterlist to prevent Ads from showing on the webpage.

Is there any proxy server configured on you home pc?

[ik9000]

That's my point though, the work system may have the intermediary certificates installed so https traffic can be intercepted. If so, that could also be confirmed by comparing the fingerprint, as it's not realistically possible to spoof those.

Of course it would only apply to the home system if it's tunnelling all web traffic through the VPN though.

At work I get the same SHA1 as you list above. This is what it shows me:


I will check what the home one is doing tonight, but as it needs https I might not get there.

[watercooled]

Oh well it's worth eliminating potential security problems either way IMO, but if it's not the problem, it's a case of trying to narrow it down. For example are other systems in the house OK? Also, does the traceroute to websites look normal (which would link in with potential VPN-related problems)?

[Jellyfish]

This come up today for me on a browser (not google and with https) Was trying to google, it's done this before then changed back if i remember rightly. Hope it's just temporary...

[watercooled]

I've just thought of something else - the clock on your computer is correct, right?

[ik9000]

I've just thought of something else - the clock on your computer is correct, right?

yes.

[ik9000]

so at home when trying to access https wiki page I get this


which gives this info


and this

[kalniel]

Certificate problems?