Hello,
We have had several customers complaining about mysterious errors when communicating with our servers and today we realized that the common denominator is that they use AVG anti virus: If this product is enabled, WinSSL on the machine in question is prevented from reaching an SSL cert revocation server:
Curl returned error 35 when handling request: <…>: schannel: next InitializeSecurityContext failed: Unknown error (0x80092012)
Curl uses WinSSL which is the library generating this error.
If disabling AVG anti virus, there is no problem for the SSL library to do its thing, including contacting the revocation servers associated with the certificate.
Is this a known issue? If not, can you look into it to fixing it? In either case, what is the expected timeframe for a fix? If you look around on the web, there are other users with the same problem - e.g. as discussed here: Can't update Twitter, HTTP Error #35 : SSL Connect Error · Issue #122 · erengy/taiga · GitHub
If you do not intend to fix, we will have to disable certificate revocation checking in the client - which decreases security for the end-user. I hope you can see the irony that we have to introduce a security issue to work around the behavior of a security product like yours :-).
Thanks!
Ulrik, Nabto
PS: I have tried various ways of submitting the above to some support service, but I am always directed to this forum - if anybody know how to contact AVG support without being a customer it would be great
Hello Ulrik,
We apologize for the inconvenience caused.
Are you experiencing issue with AVG Business products?
Thank you.
Hello agian,
That link leads me to a business support site where I can put in "the same email you registered with us". As mentioned above, I don't have any AVG products nor any support agreements and our customer should not handle this on our behalf; it is our product which is affected by the issue with your service - and many customers are affected, not just this one customer who we happened to get some more detailed information from.
Isn't it possible to get in touch with somebody who can just look at the case without regards to ownership of specific products?
Ulrik
Hello Ulrik,
Thank you for your understanding. Our AVG Business support team will reply back to you as soon as possible.
Thank you.
We have received this from an affected user.
Judging from the use cases, it is likely private PCs and hence home users. I will see if I can figure it out and report back.
Thanks!
Ulrik
Ulrik, Are your AVG users 'Home' or 'Business' users?.
AVG Guru
OK Ulrik, In that case the detail in my previous posting will apply.
AVG Guru
Hi there,
I am not a user of AVG myself but our users have issues with AVG. Who do I talk to about this?
Ulrik
Hello Ulrik,
We apologize for the inconvenience caused.
Are you experiencing issue with AVG Business products?
Thank you.
Hello Ulrik,
Thank you for providing us the screenshot. Please contact our AVG Business products ( http://www.avg.com/ww-en/business-security ) to assist you better in resolving the issue. The AVG (SMB) support in Brno, Czech Rep… will probably deal with your query at their earliest convenience. Also, For a more direct contact method try this link ( http://www.avg.com/ww-en/customer-support-business ). This will lead to this further link ( https://support.avg.com/business_contact_form?l=en_us&retUrl=business ). Please feel free to contact us for further assistance.
Thank you.