•Configuring scanning of secure network connections
•Adding the Dr.Web certificate to lists of trusted certificates for applications
•Adding the Dr.Web certificate to the list of trusted certificates via the command line
On the Network tab, you can enable the SpIDer Gate network connection monitor to scan traffic transmitted via secure connections that use SSL- and TLS-based protocols.
Figure 48. Protection against threats distributed over the network
Configuring scanning of secure network connections
To allow SpIDer Gate to scan traffic transmitted via secure network connections that use SSL- and TLS-based protocols, select the check box Check traffic transferred via secure SSL/TLS connections. To disable the scanning of secure traffic, clear the check box.
|
To manage the scanning of secure traffic, the application must operate with elevated permissions (refer to Managing Application Privileges).
If a mail client is running (such as Mozilla Thunderbird), restart it after the mode Check traffic transferred via secure SSL/TLS connections is enabled. |
To ensure correct scanning of the traffic transmitted via secure network connections, export the custom Dr.Web certificate to a file and then manually add it to the lists of trusted certificates for applications that use secure connections. Such applications are primarily web browsers and mail clients. Otherwise, if the Dr.Web certificate is not added to the list of trusted certificates, data will be displayed incorrectly if received from a website accessible via HTTPS (for example, from online banking websites, web interfaces of mail servers). If the Dr.Web certificate is not added to the list of trusted certificates for the mail client, authorization on mail servers that use secure protocols (such as SMTPS) for email transmission will fail.
To export the Dr.Web certificate to a file, click Save Dr.Web certificate; specify a path to save the file in the appeared window. By default, the file name is SpIDer Gate Trusted Root Certificate.pem, but you can change it if necessary.
Then manually add the saved file of the Dr.Web certificate to the lists of trusted certificates for those applications that fail when trying to establish secure connections. You need to add the certificate only once for an application. If you clear and then select the check box Check traffic transferred via secure SSL/TLS connections again on the Network setting page, you will not need to save the Dr.Web certificate once again or add it to the list of trusted certificates.
Adding the Dr.Web certificate to lists of trusted certificates for applications
Mozilla Firefox browser
1)Select Preferences on the main menu and then (on the appeared settings page) select Advanced. Another page opens, where you need to select Certificates.
2)Click View Certificates. In the appeared window, open the Authorities tab and click Import.
3)In the appeared window, specify a path to the Dr.Web certificate (by default, its file name is SpIDer Gate Trusted Root Certificate.pem) and click Open.
4)In the appeared window, use the check boxes to specify a necessary trust level for the certificate. It is recommended to select all three check boxes (for identification of websites, identification of email users and for identification of software). After that, click OK.
5)On the list of trusted certificates, a new section—DrWeb—appears. This section contains the added certificate (SpIDer Gate Trusted Root Certificate by default).
6)Close the window with the list of certificates by clicking OK and then close the page with browser settings (by closing the corresponding tab on the browser tab bar).
Mozilla Thunderbird mail client
1)Select Preferences on the main menu; in the appeared settings window, click Advanced. On the appeared page, select Certificates.
2)Click View Certificates. In the appeared window, open the Authorities tab and click Import.
3)In the appeared window, specify a path to the Dr.Web certificate (by default, its file name is SpIDer Gate Trusted Root Certificate.pem) and click Open.
4)In the appeared window, use the check boxes to specify a necessary trust level for the certificate. It is recommended to select all three check boxes (for identification of websites, identification of email users and for identification of software). After that, click OK.
5)On the list of trusted certificates, a new section—DrWeb—appears. This section contains the added certificate (SpIDer Gate Trusted Root Certificate by default).
6)Close the window with the list of certificates by clicking OK and then close the page with mail client settings by clicking Close.
7)Restart the mail client.
Adding the Dr.Web certificate to the list of trusted certificates via the command line
Besides the graphical user interface, you can use the command line to add the certificate. To generate it, run the command (you need to specify a name for saving the certificate in PEM format):
$ drweb-ctl certificate > <cert_name>.pem |
After that, add the certificate to the system storage. Different GNU/Linux distributions require different commands to perform this operation.
•On Ubuntu, Debian and Mint:
# apt-get update # apt-get install ca-certificates # mkdir -p /usr/local/share/ca-certificates # cp <cert_name>.pem /usr/local/share/ca-certificates/<cert_name>.crt # update-ca-certificates |
•On СentOS and Fedora:
# cp <cert_name>.pem /etc/pki/ca-trust/source/anchors/ |