root certificates in w98

Since the update website does not work mostly any more and all updates have
to be collected by hand somewhere, I just came over the problem of updating
the standard root certificates in w98se. The MS sais that the update is for
all above w95, but how to download the upload and where? I tried to download
it somehow with w2k and xp, but no luck, only some explanations are avaiable,
but not the file itself.

has anybody a link for it?

"Otto Sykora" wrote in message

Since the update website does not work mostly any more and all updates
have to be collected by hand somewhere, I just came over the problem of
updating the standard root certificates in w98se. The MS sais that the
update is for all above w95, but how to download the upload and where? I
tried to download it somehow with w2k and xp, but no luck, only some
explanations are avaiable, but not the file itself.

has anybody a link for it?

I'm at a question mark for this also, and not really sure if the link
floating around is just for W2K/WXP only and is it really for W98 anymore
since it's not supported? I mean most of the time you cant get to WU with
W98 anymore anyway, and when you can, you cannot find a download listed for
W98 roots anymore either.

I'm not convinced that this is best suited for W2K/WXP and so is why I
still have my W98SE partition sitting at the roots version ,v8,0,2195,0,
but YMMV

FWIW, this is the direct download link for the roots certificate
http://download.windowsupdate.com/ms...n/rootsupd.exe

...and I've seen many flash this other link along with it that makes it look
official, but this link to an htm page has been active for as long a I can
remember finding it and noting the link myself when I used to use WU, and
so just because this static page is still active does not mean it still
goes to the current rootsup.exe download.. YMMV
http://download.windowsupdate.com/ms...tf/en/4702.htm

Rick

Rick Chauvin wrote:
| "Otto Sykora" wrote in message
|
| Since the update website does not work mostly any more and all
| updates have to be collected by hand somewhere, I just came over the
| problem of updating the standard root certificates in w98se. The MS
| sais that the update is for all above w95, but how to download the
| upload and where? I tried to download it somehow with w2k and xp,
| but no luck, only some explanations are avaiable, but not the file
| itself.
|
| has anybody a link for it?
|
| I'm at a question mark for this also, and not really sure if the link
| floating around is just for W2K/WXP only and is it really for W98
| anymore since it's not supported? I mean most of the time you cant
| get to WU with W98 anymore anyway, and when you can, you cannot find
| a download listed for W98 roots anymore either.
|
| I'm not convinced that this is best suited for W2K/WXP and so is why I
| still have my W98SE partition sitting at the roots version
| ,v8,0,2195,0, but YMMV

The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000.
But I can't say I ever ran it. If it also came in from the auto-update--
then, yea, I ran that.

| FWIW, this is the direct download link for the roots certificate
|
http://download.windowsupdate.com/ms...n/rootsupd.exe

I took & ran this one from a MEB post. It updated me to
v.6.00.2600.0000, going only by its Properties box-- is there another
way? HOWEVER, I can't say it changed anything. I still get a dozen/so
messages saying "revocation information is not available" after
clicking...
https://getca.verisign.com/

Can that be normal? Also, various other sites will do same or similar!

| ..and I've seen many flash this other link along with it that makes
| it look official, but this link to an htm page has been active for as
| long a I can remember finding it and noting the link myself when I
| used to use WU, and so just because this static page is still active
| does not mean it still goes to the current rootsup.exe download.. YMMV
|
http://download.windowsupdate.com/ms...tf/en/4702.htm
.... This is the same Readme that comes in from the Catalog.

And here is something else, BUT I seem to already have this one
installed...

http://support.microsoft.com/kb/323172/en-us
MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
Certificates to Be Deleted

....It gives you...

.........Quote................
Date Version Size File name
------------------------------------------------
09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll
.........EOQ...................


| Rick

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR

Hi PCR,

April 23 you know what Here's is back.

"PCR" wrote in message

[....]
The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000.
But I can't say I ever ran it. If it also came in from the auto-update--
then, yea, I ran that.

Well that may be the file version of the installer or something, but as you
know if you extract it and look within its rootsupd.inf you will see half
way down what it is within that installer... that wrapper version you have
seems to be v6,0,2195,0. But if you want to see what version you have
Currently Installed on your computer - you can go to this registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
Components\{EF289A85-8E57-408d-BE47-73B55609861A

I do know that after that version v6,0,2195,0 installer you have, WU then
offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0 which was as
far as I know the last version that WU offered by itself to W98SE users to
download, and that's the one I have decided to leave installed for now.

Back when I installed v8,0,2195,0 I was updating from v7 and this is a
screenshot of my tracker showing the only things it did:
http://rdchauvin.com/RCUv8,0,2195,0.gif

[....]
I took & ran this one from a MEB post. It updated me to
v.6.00.2600.0000, going only by its Properties box-- is there another
way?

Yes as mentioned already above, but again your v.6.00....... properties
that's only the installer wrapper version and not the actual roots version,
go to the registry key to see what you actually have installed.

HOWEVER, I can't say it changed anything. I still get a dozen/so
messages saying "revocation information is not available" after
clicking...
https://getca.verisign.com/

Can that be normal? Also, various other sites will do same or similar!

If I go to that link you give above (putting it in my trusted zone) still
nothing happens - tracking it of too of course. Well, when I say nothing
happens I mean no changes take place on my system, but this is what the
webpage looks like when I go to it: screenshot:
http://rdchauvin.com/VeriSign.gif
I'm not really sure what that site is for anyway, and I'm staying at
v8,0,2195,0 for now anyway and too busy to play with other versions again.
I had restored my C:\ partition image last month bringing it back a few
months in status for a number of reasons, and built upon it from there.

And here is something else, BUT I seem to already have this one
installed...

http://support.microsoft.com/kb/323172/en-us
MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
Certificates to Be Deleted

I (and imagine most of us) did that update too which is from back in July
of 2002, and it's not a roots certificate update like we are speaking of,
but a security update for it.

I have all the rootsupd.exe offline installers for all past and current
versions anyway if I ever wanted to play, but v8,0,2195,0 is where I'm
livin for now on SE.

Rick

Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR

"PCR" wrote in message
...
| Rick Chauvin wrote:
| | "Otto Sykora" wrote in message
| |
| | Since the update website does not work mostly any more and all
| | updates have to be collected by hand somewhere, I just came over the
| | problem of updating the standard root certificates in w98se. The MS
| | sais that the update is for all above w95, but how to download the
| | upload and where? I tried to download it somehow with w2k and xp,
| | but no luck, only some explanations are avaiable, but not the file
| | itself.
| |
| | has anybody a link for it?

Saw my name couldn't resist....

| |
| | I'm at a question mark for this also, and not really sure if the link
| | floating around is just for W2K/WXP only and is it really for W98
| | anymore since it's not supported? I mean most of the time you cant
| | get to WU with W98 anymore anyway, and when you can, you cannot find
| | a download listed for W98 roots anymore either.
| |
| | I'm not convinced that this is best suited for W2K/WXP and so is why I
| | still have my W98SE partition sitting at the roots version
| | ,v8,0,2195,0, but YMMV
|
| The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000.
| But I can't say I ever ran it. If it also came in from the auto-update--
| then, yea, I ran that.

Likely, as Rick noted, yours was updated automatically.

The link was for the base update, think *jump starting*, however it does
not supply all the certificates you will now need, or need in the future.

|
| | FWIW, this is the direct download link for the roots certificate
| |
|
http://download.windowsupdate.com/ms...n/rootsupd.exe
|
| I took & ran this one from a MEB post. It updated me to
| v.6.00.2600.0000, going only by its Properties box-- is there another
| way? HOWEVER, I can't say it changed anything. I still get a dozen/so
| messages saying "revocation information is not available" after
| clicking...
| https://getca.verisign.com/
|
| Can that be normal? Also, various other sites will do same or similar!

Yep, the Verisign was to install the old *jump start* update related to
*browser* / Internet activity... Verisign {a trusted authority} signed [and
signs] its own certificate, who would verify it?

As Rick found, I also have 8,0,2195,0 as the installed base.

You will constantly get websites trying to install newer or other
certificates. Since we're dealing with unsupported 98, its now in our hands
which ones we install. Such as to access live.com [without having to
constantly click OKAY to the Security Notice] I had to install several
certificates...

My comment would be to be EXTREMELY careful which ones you allow to be
installed by carefully looking at the signers, the authorizations, etc.,
PRIOR to installing. There have been several other AUTHORITIES supposedly
added to the trusted signers list.. some have been removed such as per the
delroot.sst:

Swisskey AG1
Public CA Services1
Zuerich1
Swisskey Root CA0
Swisskey AG1
Public CA Services1
Zuerich1
Swisskey Root CA0
Certiposte1%0#
Certiposte Classe A Personne0
180624080000Z0I1
Certiposte1%0#
Certiposte Classe A Personne0
6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0A
6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0
H]cIL2p}
Certiposte1
Certiposte Serveur0
Certiposte1
Certiposte Serveur0
,C= FR, O= Certiposte, CN= Certiposte Serveur07
,C= FR, O= Certiposte, CN= Certiposte Serveur0

Moreover, there are dozens of sites attempting to install self-signed or
otherwise questionable certificates.. so, for general users:

PLEASE, DO NOT BLINDLY accept installation of these certificates. Check
them carefully.

|
| | ..and I've seen many flash this other link along with it that makes
| | it look official, but this link to an htm page has been active for as
| | long a I can remember finding it and noting the link myself when I
| | used to use WU, and so just because this static page is still active
| | does not mean it still goes to the current rootsup.exe download.. YMMV
| |
|
http://download.windowsupdate.com/ms...tf/en/4702.htm
| ... This is the same Readme that comes in from the Catalog.
|
| And here is something else, BUT I seem to already have this one
| installed...
|
| http://support.microsoft.com/kb/323172/en-us
| MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
| Certificates to Be Deleted

As Rick pointed out, that was an old update..

|
| ...It gives you...
|
| ........Quote................
| Date Version Size File name
| ------------------------------------------------
| 09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll
| ........EOQ...................
|
|
| | Rick
|
| --
| Thanks or Good Luck,
| There may be humor in this post, and,
| Naturally, you will not sue,
| Should things get worse after this,
| PCR
|
|
|

--
MEB
http://peoplescounsel.orgfree.com/
BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real
world"

"Most people, sometime in their lives, stumble across truth.
Most jump up, brush themselves off, and hurry on about their business as if
nothing had happen." Winston Churchill
_______________

Rick Chauvin wrote:
| Hi PCR,
|
| April 23 you know what Here's is back.

"Heroes", yea. There was a big fight about to start!

| "PCR" wrote in message
|
| [....]
| The one I downloaded from the WU Catalog seems to be
| v.5.00.2920.0000. But I can't say I ever ran it. If it also came in
| from the auto-update-- then, yea, I ran that.
|
| Well that may be the file version of the installer or something, but
| as you know if you extract it and look within its rootsupd.inf you
| will see half way down what it is within that installer... that
| wrapper version you have seems to be v6,0,2195,0.

Uhuh. Well... the one taken from the Catalog (& it no longer offers any)
says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken from the
URL you/MEB posted has... VERSION="11,0,2195,0" there.

| But if you want to
| see what version you have Currently Installed on your computer - you
| can go to this registry key:
|
| HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
| Components\{EF289A85-8E57-408d-BE47-73B55609861A}

I see I have v.11,0,2195,0, installed, then, from running that download.

| I do know that after that version v6,0,2195,0 installer you have, WU
| then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0
| which was as far as I know the last version that WU offered by itself
| to W98SE users to download, and that's the one I have decided to
| leave installed for now.

I wonder how I missed getting up to v8,0,2195,0. WELL, actually, maybe I
did get there from the WU auto-update. All I can say is the one I've got
from the Catalog is v5,0,2195,0. And that download is all that shows in
that Registry key... v.11,0,2195,0.

| Back when I installed v8,0,2195,0 I was updating from v7 and this is a
| screenshot of my tracker showing the only things it did:
| http://rdchauvin.com/RCUv8,0,2195,0.gif

Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com an
MS site? Is it trustworthy?

| [....]
| I took & ran this one from a MEB post. It updated me to
| v.6.00.2600.0000, going only by its Properties box-- is there another
| way?
|
| Yes as mentioned already above, but again your v.6.00.......
| properties that's only the installer wrapper version and not the
| actual roots version, go to the registry key to see what you actually
| have installed.

OK, thanks.

| HOWEVER, I can't say it changed anything. I still get a dozen/so
| messages saying "revocation information is not available" after
| clicking...
| https://getca.verisign.com/
|
| Can that be normal? Also, various other sites will do same or
| similar!
|
| If I go to that link you give above (putting it in my trusted zone)
| still nothing happens - tracking it of too of course. Well, when I
| say nothing happens I mean no changes take place on my system, but
| this is what the webpage looks like when I go to it: screenshot:
| http://rdchauvin.com/VeriSign.gif

Hmm. That site & some others gives me the message or a similar one! You
didn't get the "revocation" message? But it was doing it before I took
v.11,0,2195,0 too, whatever version it replaced! Also, verisign.com does
it even after I have it update its certificate!

| I'm not really sure what that site is for anyway, and I'm staying at
| v8,0,2195,0 for now anyway and too busy to play with other versions
| again. I had restored my C:\ partition image last month bringing it
| back a few months in status for a number of reasons, and built upon
| it from there.

Alright. It may not relate to the version of root certificates anyhow.
Maybe it's a setting I've got wrong.

| And here is something else, BUT I seem to already have this one
| installed...
|
| http://support.microsoft.com/kb/323172/en-us
| MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
| Certificates to Be Deleted
|
| I (and imagine most of us) did that update too which is from back in
| July of 2002, and it's not a roots certificate update like we are
| speaking of, but a security update for it.
|
| I have all the rootsupd.exe offline installers for all past and
| current versions anyway if I ever wanted to play, but v8,0,2195,0 is
| where I'm livin for now on SE.

Probably that is the one I wiped, if it's the last that WU auto-update
offered. But I had the problem with that one too-- or possibly I'd not
have gone to v.11 either.

| Rick
|
| Thanks or Good Luck,
| There may be humor in this post, and,
| Naturally, you will not sue,
| Should things get worse after this,
| PCR
|

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR

MEB wrote:
| "PCR" wrote in message
| ...
|| Rick Chauvin wrote:
|| | "Otto Sykora" wrote in
|| | message
|| | Since the update website does not work mostly any more and all
|| | updates have to be collected by hand somewhere, I just came over
|| | the problem of updating the standard root certificates in w98se.
|| | The MS sais that the update is for all above w95, but how to
|| | download the upload and where? I tried to download it somehow
|| | with w2k and xp, but no luck, only some explanations are
|| | avaiable, but not the file itself.
|| |
|| | has anybody a link for it?
|
| Saw my name couldn't resist....

Uhuh.

|| |
|| | I'm at a question mark for this also, and not really sure if the
|| | link floating around is just for W2K/WXP only and is it really for
|| | W98 anymore since it's not supported? I mean most of the time you
|| | cant get to WU with W98 anymore anyway, and when you can, you
|| | cannot find a download listed for W98 roots anymore either.
|| |
|| | I'm not convinced that this is best suited for W2K/WXP and so is
|| | why I still have my W98SE partition sitting at the roots version
|| | ,v8,0,2195,0, but YMMV
||
|| The one I downloaded from the WU Catalog seems to be
|| v.5.00.2920.0000. But I can't say I ever ran it. If it also came in
|| from the auto-update-- then, yea, I ran that.
|
| Likely, as Rick noted, yours was updated automatically.

I'll never know what it updated me to, as it's been replaced by...
http://download.windowsupdate.com/ms...n/rootsupd.exe

....which is v.11,0,2195,0. That's the one you posted! Why are you only
v.8,0,2195,0...? Is that an MS site? Do you or don't you trust that
site? Chauvin at least said he never installed it!

| The link was for the base update, think *jump starting*, however it
| does not supply all the certificates you will now need, or need in
| the future.

You mean it supplies some, but others may some day be necessary?

||
|| | FWIW, this is the direct download link for the roots certificate
|| |
||
|
http://download.windowsupdate.com/ms...n/rootsupd.exe
||
|| I took & ran this one from a MEB post. It updated me to
|| v.6.00.2600.0000, going only by its Properties box-- is there another
|| way? HOWEVER, I can't say it changed anything. I still get a dozen/so
|| messages saying "revocation information is not available" after
|| clicking...
|| https://getca.verisign.com/
||
|| Can that be normal? Also, various other sites will do same or
|| similar!
|
| Yep, the Verisign was to install the old *jump start* update related
| to *browser* / Internet activity... Verisign {a trusted authority}
| signed [and signs] its own certificate, who would verify it?

But each time I go to that site, I get that same message-- & even after
having the site update it! (I think I had it update it-- once or twice,
even!)

| As Rick found, I also have 8,0,2195,0 as the installed base.

SO-- you never installed the thing you posted!

| You will constantly get websites trying to install newer or other
| certificates. Since we're dealing with unsupported 98, its now in our
| hands which ones we install. Such as to access live.com [without
| having to constantly click OKAY to the Security Notice] I had to
| install several certificates...

Uhuh.

| My comment would be to be EXTREMELY careful which ones you allow to
| be installed by carefully looking at the signers, the authorizations,
| etc., PRIOR to installing. There have been several other AUTHORITIES
| supposedly added to the trusted signers list.. some have been removed
| such as per the delroot.sst:
|
| Swisskey AG1
| Public CA Services1
| Zuerich1
| Swisskey Root CA0
| Swisskey AG1
| Public CA Services1
| Zuerich1
| Swisskey Root CA0
| Certiposte1%0#
| Certiposte Classe A Personne0
| 180624080000Z0I1
| Certiposte1%0#
| Certiposte Classe A Personne0
| 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0A
| 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0
| H]cIL2p}
| Certiposte1
| Certiposte Serveur0
| Certiposte1
| Certiposte Serveur0
| ,C= FR, O= Certiposte, CN= Certiposte Serveur07
| ,C= FR, O= Certiposte, CN= Certiposte Serveur0
|
| Moreover, there are dozens of sites attempting to install
| self-signed or otherwise questionable certificates.. so, for general
| users:
|
| PLEASE, DO NOT BLINDLY accept installation of these certificates.
| Check them carefully.

Well, the URL you posted went straight into a download. If I try to
shorten the URL, I get... "You are not authorized to view this page".
So, who are they?

||
|| | ..and I've seen many flash this other link along with it that makes
|| | it look official, but this link to an htm page has been active for
|| | as long a I can remember finding it and noting the link myself
|| | when I used to use WU, and so just because this static page is
|| | still active does not mean it still goes to the current
|| | rootsup.exe download.. YMMV
|| |
||
|
http://download.windowsupdate.com/ms...tf/en/4702.htm
|| ... This is the same Readme that comes in from the Catalog.
||
|| And here is something else, BUT I seem to already have this one
|| installed...
||
|| http://support.microsoft.com/kb/323172/en-us
|| MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
|| Certificates to Be Deleted
|
| As Rick pointed out, that was an old update..

Yea. I noticed it was already installed.

||
|| ...It gives you...
||
|| ........Quote................
|| Date Version Size File name
|| ------------------------------------------------
|| 09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll
|| ........EOQ...................
||
||
|| | Rick
||
|| --
|| Thanks or Good Luck,
|| There may be humor in this post, and,
|| Naturally, you will not sue,
|| Should things get worse after this,
|| PCR
||
||
||
|
| --
| MEB
| http://peoplescounsel.orgfree.com/
| BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the
| "real world"
|
| "Most people, sometime in their lives, stumble across truth.
| Most jump up, brush themselves off, and hurry on about their business
| as if nothing had happen." Winston Churchill
| _______________

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR

Chill out dude, check your Windows Update.log ... guess where ALL your
updates came from..
exactly where you got that one...

--
MEB
http://peoplescounsel.orgfree.com/
BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real
world"
http://groups.google.com/group/the-peoples-law?hl=en - discussion group for
general aspects of Law verses the Peoples' of the world

"Most people, sometime in their lives, stumble across truth.
Most jump up, brush themselves off, and hurry on about their business as if
nothing had happen." Winston Churchill
Or to put it another way:
Morpheus can offer you the two pills;
but only you can choose whether you take the red pill or the blue one.
_______________

"PCR" wrote in message

Rick Chauvin wrote:
| Hi PCR,
|
| April 23 you know what Here's is back.

"Heroes", yea. There was a big fight about to start!

Yeah I made a typo and of course meant Hereo's

| "PCR" wrote in message
|
| [....]
| The one I downloaded from the WU Catalog seems to be
| v.5.00.2920.0000. But I can't say I ever ran it. If it also came in
| from the auto-update-- then, yea, I ran that.

Don't go by properties on the exe since it's only the installer version and
not in any way the real Certificate version number.

| Well that may be the file version of the installer or something, but
| as you know if you extract it and look within its rootsupd.inf you
| will see half way down what it is within that installer... that
| wrapper version you have seems to be v6,0,2195,0.

Uhuh. Well... the one taken from the Catalog (& it no longer offers any)
says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken from the
URL you/MEB posted has... VERSION="11,0,2195,0" there.

Did I give that v11 link at one time... maybe I did. I get bold from time
to time, but as I've always said partition imaging lets one do whatever
they want to test with pure impunity since it's easy to revert anything at
any given moment.

I ran into some Send Error reports that I could not resolve until I
reverted back to a previous C:\ partition image, and it's been fine ever
since. One of the updates I had made out of five or six was the v11 Roots,
but honestly I don't think it was that which caused my problem at all, but
nevertheless in the revert it dumped most of my msfn updates which means
I'm back to the last official Roots that WU offered W98SE users, confirmed,
which is the v8 I've listed. Don't read much into that for your own
situation or problem though, since it was my thing on my own setup.

| But if you want to
| see what version you have Currently Installed on your computer - you
| can go to this registry key:
|
| HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
| Components\{EF289A85-8E57-408d-BE47-73B55609861A}

I see I have v.11,0,2195,0, installed, then, from running that download.

Undersood..

| I do know that after that version v6,0,2195,0 installer you have, WU
| then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0
| which was as far as I know the last version that WU offered by itself
| to W98SE users to download, and that's the one I have decided to
| leave installed for now.

I wonder how I missed getting up to v8,0,2195,0. WELL, actually, maybe I
did get there from the WU auto-update. All I can say is the one I've got
from the Catalog is v5,0,2195,0. And that download is all that shows in
that Registry key... v.11,0,2195,0.

v5,0,2195,0 is Official and was from back in 2004, and v11,0,2195,0 is a
very recent one. v8,0,2195,0 is from mid 2006 and is the last Official one
for SE afaik.
The question is if v11,0,2195,0 is for W98SE too? ..or is it only for
W2k/WXP/Vista? ...I don't know, but I do know when v11 is installed on SE
that I saw that it reverts much of itself in short order after visiting a
few websites, which I found interesting.

| Back when I installed v8,0,2195,0 I was updating from v7 and this is a
| screenshot of my tracker showing the only things it did:
| http://rdchauvin.com/RCUv8,0,2195,0.gif

Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com an
MS site? Is it trustworthy?

Yes it's trustworthy for the most part, but you didn't get that version by
going to WU with W98SE that's for sure, you used a direct download link
that's really for what OS?


| I took & ran this one from a MEB post. It updated me to
| v.6.00.2600.0000, going only by its Properties box-- is there another
| way?
|
| Yes as mentioned already above, but again your v.6.00.......
| properties that's only the installer wrapper version and not the
| actual roots version, go to the registry key to see what you actually
| have installed.

OK, thanks.

| HOWEVER, I can't say it changed anything. I still get a dozen/so
| messages saying "revocation information is not available" after
| clicking...
| https://getca.verisign.com/
|
| Can that be normal? Also, various other sites will do same or
| similar!
|
| If I go to that link you give above (putting it in my trusted zone)
| still nothing happens - tracking it of too of course. Well, when I
| say nothing happens I mean no changes take place on my system, but
| this is what the webpage looks like when I go to it: screenshot:
| http://rdchauvin.com/VeriSign.gif

Hmm. That site & some others gives me the message or a similar one! You
didn't get the "revocation" message? But it was doing it before I took
v.11,0,2195,0 too, whatever version it replaced! Also, verisign.com does
it even after I have it update its certificate!

No I did not get a revocation message with v8 installed, and I screenshot
showed that is was verified. However, I would not download anything from
that website anyway since I don't really know what it is they do or what
is, or if it's meant for SE or not, or if OS versions ever matter...?
Simply I just did not research it there nor do I have any time or plans to.
At the moment v8,0,2195,0 is where I stop, ymmv.

There are ways for you to revert back to v8 or earlier via your backup
partition images, or, if one can just download the last known Official
Roots Certificate from WU that was Officially still for W98SE, and install
it - will that revert the v9, v10, or v11, or any combination of them,
totally back to v8 status?

http://rdchauvin.com/v8,0,2195,0-W98-rootsupd.zip


| I'm not really sure what that site is for anyway, and I'm staying at
| v8,0,2195,0 for now anyway and too busy to play with other versions
| again. I had restored my C:\ partition image last month bringing it
| back a few months in status for a number of reasons, and built upon
| it from there.

Alright. It may not relate to the version of root certificates anyhow.
Maybe it's a setting I've got wrong.

I don't know.

| And here is something else, BUT I seem to already have this one
| installed...
|
| http://support.microsoft.com/kb/323172/en-us
| MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
| Certificates to Be Deleted
|
| I (and imagine most of us) did that update too which is from back in
| July of 2002, and it's not a roots certificate update like we are
| speaking of, but a security update for it.
|
| I have all the rootsupd.exe offline installers for all past and
| current versions anyway if I ever wanted to play, but v8,0,2195,0 is
| where I'm livin for now on SE.

Probably that is the one I wiped, if it's the last that WU auto-update
offered. But I had the problem with that one too-- or possibly I'd not
have gone to v.11 either.

I'm not sure what you mean, but I do know if you have a backup partition
image, you can revert to anything you want; iow, if you imaged back to a v8
timeline, exported a registry of that key, reimaged back to current, and
then delete current and merged what you had at v8 status, you would
absolutely be at v8 roots status; but again I have honestly no idea of what
a wrong Roots installed would cause with what right/wrong happenings, all I
know is I know for sure that v8 is for W98SE... as for v9, v10, and v11 -
I'm not sure, yet.

Rick


--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR

Rick Chauvin wrote:
| "PCR" wrote in message
|
| Rick Chauvin wrote:
|| Hi PCR,
||
|| April 23 you know what Here's is back.
|
| "Heroes", yea. There was a big fight about to start!
|
| Yeah I made a typo and of course meant Hereo's
|
|| "PCR" wrote in message
||
|| [....]
|| The one I downloaded from the WU Catalog seems to be
|| v.5.00.2920.0000. But I can't say I ever ran it. If it also came in
|| from the auto-update-- then, yea, I ran that.
|
| Don't go by properties on the exe since it's only the installer
| version and not in any way the real Certificate version number.

I know that now, thanks, Chauvin.

|| Well that may be the file version of the installer or something, but
|| as you know if you extract it and look within its rootsupd.inf you
|| will see half way down what it is within that installer... that
|| wrapper version you have seems to be v6,0,2195,0.
|
| Uhuh. Well... the one taken from the Catalog (& it no longer offers
| any) says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken
| from the URL you/MEB posted has... VERSION="11,0,2195,0" there.
|
| Did I give that v11 link at one time... maybe I did.

Yep-- in this thread...!...
FWIW, this is the direct download link for the roots certificate
http://download.windowsupdate.com/ms...n/rootsupd.exe

I even took the download separately from the one I already had from MEB
& checked inside that RootsUpd.inf.

| I get bold from
| time to time, but as I've always said partition imaging lets one do
| whatever they want to test with pure impunity since it's easy to
| revert anything at any given moment.
D:\WINDOWSfind /n /i "0,2195,0" system.dat
---------- system.dat
[4397] Version6,0,2195,0
____
Locale*
____ ¶
ComponentIDWindows Roots
Update¦ (
....snip...

Hmmm. It looks like my Dartition has a Registry of v.6,0,2195,0 for
that root certificate update-- not the v.8 you report. But, as it wasn't
for you during your test, I'm not sure the v.11 Roots I've got now is
problematic. But you have chosen not to keep it, & I can only get v.6
back with a full restore to my backup partition. It isn't at the WU
Catalog now, & my earlier download from it is v.5 only.

| I ran into some Send Error reports that I could not resolve until I
| reverted back to a previous C:\ partition image, and it's been fine
| ever since. One of the updates I had made out of five or six was the
| v11 Roots, but honestly I don't think it was that which caused my
| problem at all, but nevertheless in the revert it dumped most of my
| msfn updates which means I'm back to the last official Roots that WU
| offered W98SE users, confirmed, which is the v8 I've listed.

It looks like I never did have v8 Roots-- but I always took every
auto-WU offered for Win98SE!

| Don't
| read much into that for your own situation or problem though, since
| it was my thing on my own setup.

I don't believe I ever had the problem you report of "Send Error".

|| But if you want to
|| see what version you have Currently Installed on your computer - you
|| can go to this registry key:
||
|| HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
|| Components\{EF289A85-8E57-408d-BE47-73B55609861A}
|
| I see I have v.11,0,2195,0, installed, then, from running that
| download.
|
| Undersood..
|
|| I do know that after that version v6,0,2195,0 installer you have, WU
|| then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0
|| which was as far as I know the last version that WU offered by
|| itself to W98SE users to download, and that's the one I have
|| decided to leave installed for now.
|
| I wonder how I missed getting up to v8,0,2195,0. WELL, actually,
| maybe I did get there from the WU auto-update. All I can say is the
| one I've got from the Catalog is v5,0,2195,0. And that download is
| all that shows in that Registry key... v.11,0,2195,0.
|
| v5,0,2195,0 is Official and was from back in 2004, and v11,0,2195,0
| is a very recent one. v8,0,2195,0 is from mid 2006 and is the last
| Official one for SE afaik.

Did it come in with the auto-WU, or did you have to click for it?

| The question is if v11,0,2195,0 is for W98SE too? ..or is it only for
| W2k/WXP/Vista? ...I don't know, but I do know when v11 is installed
| on SE that I saw that it reverts much of itself in short order after
| visiting a few websites, which I found interesting.

Hmmm. I don't know what to make of it. Anyhow, every time I go to that
Verisign site I will get that "revocation certificate is not available"
requestor. SO, mine isn't self-ccorrecting, anyhow.

|| Back when I installed v8,0,2195,0 I was updating from v7 and this
|| is a screenshot of my tracker showing the only things it did:
|| http://rdchauvin.com/RCUv8,0,2195,0.gif
|
| Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com
| an MS site? Is it trustworthy?
|
| Yes it's trustworthy for the most part, but you didn't get that
| version by going to WU with W98SE that's for sure, you used a direct
| download link that's really for what OS?

Well, I got it from that URL both you & MEB posted. You did attach a
disclaimer, though.

|| I took & ran this one from a MEB post. It updated me to
|| v.6.00.2600.0000, going only by its Properties box-- is there
|| another way?
||
|| Yes as mentioned already above, but again your v.6.00.......
|| properties that's only the installer wrapper version and not the
|| actual roots version, go to the registry key to see what you
|| actually have installed.
|
| OK, thanks.
|
|| HOWEVER, I can't say it changed anything. I still get a dozen/so
|| messages saying "revocation information is not available" after
|| clicking...
|| https://getca.verisign.com/
||
|| Can that be normal? Also, various other sites will do same or
|| similar!
||
|| If I go to that link you give above (putting it in my trusted zone)
|| still nothing happens - tracking it of too of course. Well, when I
|| say nothing happens I mean no changes take place on my system, but
|| this is what the webpage looks like when I go to it: screenshot:
|| http://rdchauvin.com/VeriSign.gif
|
| Hmm. That site & some others gives me the message or a similar one!
| You didn't get the "revocation" message? But it was doing it before
| I took v.11,0,2195,0 too, whatever version it replaced! Also,
| verisign.com does it even after I have it update its certificate!
|
| No I did not get a revocation message with v8 installed, and I
| screenshot showed that is was verified. However, I would not download
| anything from that website anyway since I don't really know what it
| is they do or what is, or if it's meant for SE or not, or if OS
| versions ever matter...? Simply I just did not research it there nor
| do I have any time or plans to. At the moment v8,0,2195,0 is where I
| stop, ymmv.

Uhuh. But I think glee also posted the URL for that VeriSign site...

"glee" wrote in message
...
| Read this:
| https://getca.verisign.com/clientRoot.pdf
| for instructions on how to install the certificate.
| --
| Glen Ventura, MS MVP Shell/User, A+
| http://dts-l.org/
| http://dts-l.org/goodpost.htm

I get the same page shown in your image-- but only after clicking to
proceed on the requestor about "revocation" multiple times. If I click
NOT to proceed, the page won't show. If I look at & take the
certificate, the same STILL will happen when next I visit the site. I
should see what InCtrl5 will report about all that activity.

Hmmm. I'm thinking about my full system backup now!

| There are ways for you to revert back to v8 or earlier via your backup
| partition images,

As I showed above, I can only get to v.6 by reverting to my full system
backup.

| or, if one can just download the last known Official
| Roots Certificate from WU that was Officially still for W98SE, and
| install it - will that revert the v9, v10, or v11, or any combination
| of them, totally back to v8 status?
|
| http://rdchauvin.com/v8,0,2195,0-W98-rootsupd.zip

OK, I've taken the download, thanks. So, now I can get to v.8, which I
never had. But I must also investigate what VeriSign has been doing to
me now-- with a Google search & with InCtrl5. McAfee & Kerio never
complained about VeriSign is one good thing. I wonder whether v.8 is the
reason you are immune!

|| I'm not really sure what that site is for anyway, and I'm staying at
|| v8,0,2195,0 for now anyway and too busy to play with other versions
|| again. I had restored my C:\ partition image last month bringing it
|| back a few months in status for a number of reasons, and built upon
|| it from there.
|
| Alright. It may not relate to the version of root certificates
| anyhow. Maybe it's a setting I've got wrong.
|
| I don't know.

Yea. I'm fairly sure the same was happening with v.6 Roots.

|| And here is something else, BUT I seem to already have this one
|| installed...
||
|| http://support.microsoft.com/kb/323172/en-us
|| MS02-048: Flaw in Certificate Enrollment Control May Cause Digital
|| Certificates to Be Deleted
||
|| I (and imagine most of us) did that update too which is from back in
|| July of 2002, and it's not a roots certificate update like we are
|| speaking of, but a security update for it.
||
|| I have all the rootsupd.exe offline installers for all past and
|| current versions anyway if I ever wanted to play, but v8,0,2195,0 is
|| where I'm livin for now on SE.
|
| Probably that is the one I wiped, if it's the last that WU
| auto-update offered. But I had the problem with that one too-- or
| possibly I'd not have gone to v.11 either.
|
| I'm not sure what you mean, but I do know if you have a backup
| partition image, you can revert to anything you want; iow, if you
| imaged back to a v8 timeline, exported a registry of that key,
| reimaged back to current, and then delete current and merged what you
| had at v8 status, you would absolutely be at v8 roots status; but
| again I have honestly no idea of what a wrong Roots installed would
| cause with what right/wrong happenings, all I know is I know for sure
| that v8 is for W98SE... as for v9, v10, and v11 - I'm not sure, yet.

Thanks a lot for all you've done & all this advice. I think I've proven
I can only revert to v.6 by doing an export of my backup Registry the
way you suggest. I'm fairly sure v.6 won't prevent VeriSign from putting
up that requestor. Maybe v.8 will; thanks again for that download. But I
must first investigate what VeriSign has been doing, especially by my
clicking to "proceed" at its requestor. I even clicked to "view" its
certificate & to update it-- & STILL it always will offer it again! Let
me go see what MEB is saying now.

| Rick
|
|
| --
| Thanks or Good Luck,
| There may be humor in this post, and,
| Naturally, you will not sue,
| Should things get worse after this,
| PCR
|

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR