avast webshield blocking secure connection

Re-signs certificates that cannot be found or are self-signed with an 'untrusted' CA certificate.Re-signs verified certificates with a 'trusted' CA certificate.The recreated certificate signing is done according to the following rules: On a secured connection, the proxy initiates the SSL handshake with the destination server, checks the SSL certificate, and sends a new CA certificate signed with the Avast 'trusted' or 'untrusted' label to the client.

The trusted certificate goes into the System Roots keychain. Avast generates a 'trusted', and 'untrusted' SSL CA certificates during installation. The proxy is capable of scanning secured connections when enabled. You can add the excluded host to the /etc/hosts path with a specific IP address so that all traffic to that host goes to the specified IP address and the exclusion works. Servers with DNS load balancing that directs every connection to a different IP address usually do not match the exclusion list IP address. Troubleshooting tip: Exclusions are IP-based and the proxy server converts host names into IP addresses. Connections to hosts on the exclusion list pass without being scanned. The Mail shield and the Web shield allow exclusions. You may need to temporarily disable the File shield to access the test file when testing Web and Mail shield. The EICAR file can be detected by Avast and most antivirus programs. To test how the shields work, we offer a harmless virus sample file. Most clients do not attempt to connect using IPv4 so threatening destination servers become inaccessible. IPv6 network connections are immediately closed. The Avast shields use a network proxy which scans all the network traffic on your system.

Avast webshield blocking secure connection