MacOS – Cant update/install homebrew packages with Kaspersky Security Software (Self Signed Cert)

homebrewmacos

At work we have Kaspersky installed. Kaspersky installs a self signed cert so it can decrypt/inspect web traffic. Chrome and everything works fine except for homebrew. When i try to install/update software this is what i see:

brew install yarn
==> Downloading https://yarnpkg.com/downloads/1.22.10/yarn-v1.22.10.tar.gz
######################################################################## 100.0%##O#- #
curl: (35) error:1400443E:SSL routines:CONNECT_CR_SRVR_HELLO:tlsv1 alert inappropriate fallback
Error: Failed to download resource "yarn"
Download failed: https://yarnpkg.com/downloads/1.22.10/yarn-v1.22.10.tar.gz

Since it appears its a curl issue i tried to create a .curlrc file with insecure but that doesn't help at all. I'm able to call one of our IT admins over and temporarily turn off web anti-virus but that is starting to be a major pain every time i install/update software. They aren't, of course, going to allow me to permantely turn it off. I have this issue on no matter what mac i use (one is a m1 based mac and the other is an intel based mac).

Best Answer

I presume your company is using Kaspersky Endpoint Security.
I would suggest asking your IT admins to add brew update sources to trusted web addresses.
Or perhaps you could ask them for privileges to edit Web Monitor exclusions in your KES client app and add brew to trusted websites yourself, here is an article from the online help: https://support.kaspersky.com/KESMac/11.1_adminguide/en-US/96925.htm

I would also recommend your IT admins to get in touch with Kaspersky Support to resolve this issue.