If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
root certificates in w98
Since the update website does not work mostly any more and all updates have
to be collected by hand somewhere, I just came over the problem of updating the standard root certificates in w98se. The MS sais that the update is for all above w95, but how to download the upload and where? I tried to download it somehow with w2k and xp, but no luck, only some explanations are avaiable, but not the file itself. has anybody a link for it? |
#2
|
|||
|
|||
root certificates in w98
"Otto Sykora" wrote in message Since the update website does not work mostly any more and all updates have to be collected by hand somewhere, I just came over the problem of updating the standard root certificates in w98se. The MS sais that the update is for all above w95, but how to download the upload and where? I tried to download it somehow with w2k and xp, but no luck, only some explanations are avaiable, but not the file itself. has anybody a link for it? I'm at a question mark for this also, and not really sure if the link floating around is just for W2K/WXP only and is it really for W98 anymore since it's not supported? I mean most of the time you cant get to WU with W98 anymore anyway, and when you can, you cannot find a download listed for W98 roots anymore either. I'm not convinced that this is best suited for W2K/WXP and so is why I still have my W98SE partition sitting at the roots version ,v8,0,2195,0, but YMMV FWIW, this is the direct download link for the roots certificate http://download.windowsupdate.com/ms...n/rootsupd.exe ...and I've seen many flash this other link along with it that makes it look official, but this link to an htm page has been active for as long a I can remember finding it and noting the link myself when I used to use WU, and so just because this static page is still active does not mean it still goes to the current rootsup.exe download.. YMMV http://download.windowsupdate.com/ms...tf/en/4702.htm Rick |
#3
|
|||
|
|||
root certificates in w98
Rick Chauvin wrote:
| "Otto Sykora" wrote in message | | Since the update website does not work mostly any more and all | updates have to be collected by hand somewhere, I just came over the | problem of updating the standard root certificates in w98se. The MS | sais that the update is for all above w95, but how to download the | upload and where? I tried to download it somehow with w2k and xp, | but no luck, only some explanations are avaiable, but not the file | itself. | | has anybody a link for it? | | I'm at a question mark for this also, and not really sure if the link | floating around is just for W2K/WXP only and is it really for W98 | anymore since it's not supported? I mean most of the time you cant | get to WU with W98 anymore anyway, and when you can, you cannot find | a download listed for W98 roots anymore either. | | I'm not convinced that this is best suited for W2K/WXP and so is why I | still have my W98SE partition sitting at the roots version | ,v8,0,2195,0, but YMMV The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000. But I can't say I ever ran it. If it also came in from the auto-update-- then, yea, I ran that. | FWIW, this is the direct download link for the roots certificate | http://download.windowsupdate.com/ms...n/rootsupd.exe I took & ran this one from a MEB post. It updated me to v.6.00.2600.0000, going only by its Properties box-- is there another way? HOWEVER, I can't say it changed anything. I still get a dozen/so messages saying "revocation information is not available" after clicking... https://getca.verisign.com/ Can that be normal? Also, various other sites will do same or similar! | ..and I've seen many flash this other link along with it that makes | it look official, but this link to an htm page has been active for as | long a I can remember finding it and noting the link myself when I | used to use WU, and so just because this static page is still active | does not mean it still goes to the current rootsup.exe download.. YMMV | http://download.windowsupdate.com/ms...tf/en/4702.htm .... This is the same Readme that comes in from the Catalog. And here is something else, BUT I seem to already have this one installed... http://support.microsoft.com/kb/323172/en-us MS02-048: Flaw in Certificate Enrollment Control May Cause Digital Certificates to Be Deleted ....It gives you... .........Quote................ Date Version Size File name ------------------------------------------------ 09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll .........EOQ................... | Rick -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
#4
|
|||
|
|||
root certificates in w98
Hi PCR,
April 23 you know what Here's is back. "PCR" wrote in message [....] The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000. But I can't say I ever ran it. If it also came in from the auto-update-- then, yea, I ran that. Well that may be the file version of the installer or something, but as you know if you extract it and look within its rootsupd.inf you will see half way down what it is within that installer... that wrapper version you have seems to be v6,0,2195,0. But if you want to see what version you have Currently Installed on your computer - you can go to this registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A I do know that after that version v6,0,2195,0 installer you have, WU then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0 which was as far as I know the last version that WU offered by itself to W98SE users to download, and that's the one I have decided to leave installed for now. Back when I installed v8,0,2195,0 I was updating from v7 and this is a screenshot of my tracker showing the only things it did: http://rdchauvin.com/RCUv8,0,2195,0.gif [....] I took & ran this one from a MEB post. It updated me to v.6.00.2600.0000, going only by its Properties box-- is there another way? Yes as mentioned already above, but again your v.6.00....... properties that's only the installer wrapper version and not the actual roots version, go to the registry key to see what you actually have installed. HOWEVER, I can't say it changed anything. I still get a dozen/so messages saying "revocation information is not available" after clicking... https://getca.verisign.com/ Can that be normal? Also, various other sites will do same or similar! If I go to that link you give above (putting it in my trusted zone) still nothing happens - tracking it of too of course. Well, when I say nothing happens I mean no changes take place on my system, but this is what the webpage looks like when I go to it: screenshot: http://rdchauvin.com/VeriSign.gif I'm not really sure what that site is for anyway, and I'm staying at v8,0,2195,0 for now anyway and too busy to play with other versions again. I had restored my C:\ partition image last month bringing it back a few months in status for a number of reasons, and built upon it from there. And here is something else, BUT I seem to already have this one installed... http://support.microsoft.com/kb/323172/en-us MS02-048: Flaw in Certificate Enrollment Control May Cause Digital Certificates to Be Deleted I (and imagine most of us) did that update too which is from back in July of 2002, and it's not a roots certificate update like we are speaking of, but a security update for it. I have all the rootsupd.exe offline installers for all past and current versions anyway if I ever wanted to play, but v8,0,2195,0 is where I'm livin for now on SE. Rick Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
#5
|
|||
|
|||
root certificates in w98
"PCR" wrote in message ... | Rick Chauvin wrote: | | "Otto Sykora" wrote in message | | | | Since the update website does not work mostly any more and all | | updates have to be collected by hand somewhere, I just came over the | | problem of updating the standard root certificates in w98se. The MS | | sais that the update is for all above w95, but how to download the | | upload and where? I tried to download it somehow with w2k and xp, | | but no luck, only some explanations are avaiable, but not the file | | itself. | | | | has anybody a link for it? Saw my name couldn't resist.... | | | | I'm at a question mark for this also, and not really sure if the link | | floating around is just for W2K/WXP only and is it really for W98 | | anymore since it's not supported? I mean most of the time you cant | | get to WU with W98 anymore anyway, and when you can, you cannot find | | a download listed for W98 roots anymore either. | | | | I'm not convinced that this is best suited for W2K/WXP and so is why I | | still have my W98SE partition sitting at the roots version | | ,v8,0,2195,0, but YMMV | | The one I downloaded from the WU Catalog seems to be v.5.00.2920.0000. | But I can't say I ever ran it. If it also came in from the auto-update-- | then, yea, I ran that. Likely, as Rick noted, yours was updated automatically. The link was for the base update, think *jump starting*, however it does not supply all the certificates you will now need, or need in the future. | | | FWIW, this is the direct download link for the roots certificate | | | http://download.windowsupdate.com/ms...n/rootsupd.exe | | I took & ran this one from a MEB post. It updated me to | v.6.00.2600.0000, going only by its Properties box-- is there another | way? HOWEVER, I can't say it changed anything. I still get a dozen/so | messages saying "revocation information is not available" after | clicking... | https://getca.verisign.com/ | | Can that be normal? Also, various other sites will do same or similar! Yep, the Verisign was to install the old *jump start* update related to *browser* / Internet activity... Verisign {a trusted authority} signed [and signs] its own certificate, who would verify it? As Rick found, I also have 8,0,2195,0 as the installed base. You will constantly get websites trying to install newer or other certificates. Since we're dealing with unsupported 98, its now in our hands which ones we install. Such as to access live.com [without having to constantly click OKAY to the Security Notice] I had to install several certificates... My comment would be to be EXTREMELY careful which ones you allow to be installed by carefully looking at the signers, the authorizations, etc., PRIOR to installing. There have been several other AUTHORITIES supposedly added to the trusted signers list.. some have been removed such as per the delroot.sst: Swisskey AG1 Public CA Services1 Zuerich1 Swisskey Root CA0 Swisskey AG1 Public CA Services1 Zuerich1 Swisskey Root CA0 Certiposte1%0# Certiposte Classe A Personne0 180624080000Z0I1 Certiposte1%0# Certiposte Classe A Personne0 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0A 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0 H]cIL2p} Certiposte1 Certiposte Serveur0 Certiposte1 Certiposte Serveur0 ,C= FR, O= Certiposte, CN= Certiposte Serveur07 ,C= FR, O= Certiposte, CN= Certiposte Serveur0 Moreover, there are dozens of sites attempting to install self-signed or otherwise questionable certificates.. so, for general users: PLEASE, DO NOT BLINDLY accept installation of these certificates. Check them carefully. | | | ..and I've seen many flash this other link along with it that makes | | it look official, but this link to an htm page has been active for as | | long a I can remember finding it and noting the link myself when I | | used to use WU, and so just because this static page is still active | | does not mean it still goes to the current rootsup.exe download.. YMMV | | | http://download.windowsupdate.com/ms...tf/en/4702.htm | ... This is the same Readme that comes in from the Catalog. | | And here is something else, BUT I seem to already have this one | installed... | | http://support.microsoft.com/kb/323172/en-us | MS02-048: Flaw in Certificate Enrollment Control May Cause Digital | Certificates to Be Deleted As Rick pointed out, that was an old update.. | | ...It gives you... | | ........Quote................ | Date Version Size File name | ------------------------------------------------ | 09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll | ........EOQ................... | | | | Rick | | -- | Thanks or Good Luck, | There may be humor in this post, and, | Naturally, you will not sue, | Should things get worse after this, | PCR | | | -- MEB http://peoplescounsel.orgfree.com/ BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real world" "Most people, sometime in their lives, stumble across truth. Most jump up, brush themselves off, and hurry on about their business as if nothing had happen." Winston Churchill _______________ |
#6
|
|||
|
|||
root certificates in w98
Rick Chauvin wrote:
| Hi PCR, | | April 23 you know what Here's is back. "Heroes", yea. There was a big fight about to start! | "PCR" wrote in message | | [....] | The one I downloaded from the WU Catalog seems to be | v.5.00.2920.0000. But I can't say I ever ran it. If it also came in | from the auto-update-- then, yea, I ran that. | | Well that may be the file version of the installer or something, but | as you know if you extract it and look within its rootsupd.inf you | will see half way down what it is within that installer... that | wrapper version you have seems to be v6,0,2195,0. Uhuh. Well... the one taken from the Catalog (& it no longer offers any) says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken from the URL you/MEB posted has... VERSION="11,0,2195,0" there. | But if you want to | see what version you have Currently Installed on your computer - you | can go to this registry key: | | HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed | Components\{EF289A85-8E57-408d-BE47-73B55609861A} I see I have v.11,0,2195,0, installed, then, from running that download. | I do know that after that version v6,0,2195,0 installer you have, WU | then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0 | which was as far as I know the last version that WU offered by itself | to W98SE users to download, and that's the one I have decided to | leave installed for now. I wonder how I missed getting up to v8,0,2195,0. WELL, actually, maybe I did get there from the WU auto-update. All I can say is the one I've got from the Catalog is v5,0,2195,0. And that download is all that shows in that Registry key... v.11,0,2195,0. | Back when I installed v8,0,2195,0 I was updating from v7 and this is a | screenshot of my tracker showing the only things it did: | http://rdchauvin.com/RCUv8,0,2195,0.gif Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com an MS site? Is it trustworthy? | [....] | I took & ran this one from a MEB post. It updated me to | v.6.00.2600.0000, going only by its Properties box-- is there another | way? | | Yes as mentioned already above, but again your v.6.00....... | properties that's only the installer wrapper version and not the | actual roots version, go to the registry key to see what you actually | have installed. OK, thanks. | HOWEVER, I can't say it changed anything. I still get a dozen/so | messages saying "revocation information is not available" after | clicking... | https://getca.verisign.com/ | | Can that be normal? Also, various other sites will do same or | similar! | | If I go to that link you give above (putting it in my trusted zone) | still nothing happens - tracking it of too of course. Well, when I | say nothing happens I mean no changes take place on my system, but | this is what the webpage looks like when I go to it: screenshot: | http://rdchauvin.com/VeriSign.gif Hmm. That site & some others gives me the message or a similar one! You didn't get the "revocation" message? But it was doing it before I took v.11,0,2195,0 too, whatever version it replaced! Also, verisign.com does it even after I have it update its certificate! | I'm not really sure what that site is for anyway, and I'm staying at | v8,0,2195,0 for now anyway and too busy to play with other versions | again. I had restored my C:\ partition image last month bringing it | back a few months in status for a number of reasons, and built upon | it from there. Alright. It may not relate to the version of root certificates anyhow. Maybe it's a setting I've got wrong. | And here is something else, BUT I seem to already have this one | installed... | | http://support.microsoft.com/kb/323172/en-us | MS02-048: Flaw in Certificate Enrollment Control May Cause Digital | Certificates to Be Deleted | | I (and imagine most of us) did that update too which is from back in | July of 2002, and it's not a roots certificate update like we are | speaking of, but a security update for it. | | I have all the rootsupd.exe offline installers for all past and | current versions anyway if I ever wanted to play, but v8,0,2195,0 is | where I'm livin for now on SE. Probably that is the one I wiped, if it's the last that WU auto-update offered. But I had the problem with that one too-- or possibly I'd not have gone to v.11 either. | Rick | | Thanks or Good Luck, | There may be humor in this post, and, | Naturally, you will not sue, | Should things get worse after this, | PCR | -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
#7
|
|||
|
|||
root certificates in w98
MEB wrote:
| "PCR" wrote in message | ... || Rick Chauvin wrote: || | "Otto Sykora" wrote in || | message || | Since the update website does not work mostly any more and all || | updates have to be collected by hand somewhere, I just came over || | the problem of updating the standard root certificates in w98se. || | The MS sais that the update is for all above w95, but how to || | download the upload and where? I tried to download it somehow || | with w2k and xp, but no luck, only some explanations are || | avaiable, but not the file itself. || | || | has anybody a link for it? | | Saw my name couldn't resist.... Uhuh. || | || | I'm at a question mark for this also, and not really sure if the || | link floating around is just for W2K/WXP only and is it really for || | W98 anymore since it's not supported? I mean most of the time you || | cant get to WU with W98 anymore anyway, and when you can, you || | cannot find a download listed for W98 roots anymore either. || | || | I'm not convinced that this is best suited for W2K/WXP and so is || | why I still have my W98SE partition sitting at the roots version || | ,v8,0,2195,0, but YMMV || || The one I downloaded from the WU Catalog seems to be || v.5.00.2920.0000. But I can't say I ever ran it. If it also came in || from the auto-update-- then, yea, I ran that. | | Likely, as Rick noted, yours was updated automatically. I'll never know what it updated me to, as it's been replaced by... http://download.windowsupdate.com/ms...n/rootsupd.exe ....which is v.11,0,2195,0. That's the one you posted! Why are you only v.8,0,2195,0...? Is that an MS site? Do you or don't you trust that site? Chauvin at least said he never installed it! | The link was for the base update, think *jump starting*, however it | does not supply all the certificates you will now need, or need in | the future. You mean it supplies some, but others may some day be necessary? || || | FWIW, this is the direct download link for the roots certificate || | || | http://download.windowsupdate.com/ms...n/rootsupd.exe || || I took & ran this one from a MEB post. It updated me to || v.6.00.2600.0000, going only by its Properties box-- is there another || way? HOWEVER, I can't say it changed anything. I still get a dozen/so || messages saying "revocation information is not available" after || clicking... || https://getca.verisign.com/ || || Can that be normal? Also, various other sites will do same or || similar! | | Yep, the Verisign was to install the old *jump start* update related | to *browser* / Internet activity... Verisign {a trusted authority} | signed [and signs] its own certificate, who would verify it? But each time I go to that site, I get that same message-- & even after having the site update it! (I think I had it update it-- once or twice, even!) | As Rick found, I also have 8,0,2195,0 as the installed base. SO-- you never installed the thing you posted! | You will constantly get websites trying to install newer or other | certificates. Since we're dealing with unsupported 98, its now in our | hands which ones we install. Such as to access live.com [without | having to constantly click OKAY to the Security Notice] I had to | install several certificates... Uhuh. | My comment would be to be EXTREMELY careful which ones you allow to | be installed by carefully looking at the signers, the authorizations, | etc., PRIOR to installing. There have been several other AUTHORITIES | supposedly added to the trusted signers list.. some have been removed | such as per the delroot.sst: | | Swisskey AG1 | Public CA Services1 | Zuerich1 | Swisskey Root CA0 | Swisskey AG1 | Public CA Services1 | Zuerich1 | Swisskey Root CA0 | Certiposte1%0# | Certiposte Classe A Personne0 | 180624080000Z0I1 | Certiposte1%0# | Certiposte Classe A Personne0 | 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0A | 6C= FR, O= Certiposte, CN= Certiposte Classe A Personne0 | H]cIL2p} | Certiposte1 | Certiposte Serveur0 | Certiposte1 | Certiposte Serveur0 | ,C= FR, O= Certiposte, CN= Certiposte Serveur07 | ,C= FR, O= Certiposte, CN= Certiposte Serveur0 | | Moreover, there are dozens of sites attempting to install | self-signed or otherwise questionable certificates.. so, for general | users: | | PLEASE, DO NOT BLINDLY accept installation of these certificates. | Check them carefully. Well, the URL you posted went straight into a download. If I try to shorten the URL, I get... "You are not authorized to view this page". So, who are they? || || | ..and I've seen many flash this other link along with it that makes || | it look official, but this link to an htm page has been active for || | as long a I can remember finding it and noting the link myself || | when I used to use WU, and so just because this static page is || | still active does not mean it still goes to the current || | rootsup.exe download.. YMMV || | || | http://download.windowsupdate.com/ms...tf/en/4702.htm || ... This is the same Readme that comes in from the Catalog. || || And here is something else, BUT I seem to already have this one || installed... || || http://support.microsoft.com/kb/323172/en-us || MS02-048: Flaw in Certificate Enrollment Control May Cause Digital || Certificates to Be Deleted | | As Rick pointed out, that was an old update.. Yea. I noticed it was already installed. || || ...It gives you... || || ........Quote................ || Date Version Size File name || ------------------------------------------------ || 09-Jul-2002 5.131.3659.0 172,664 Xenroll.dll || ........EOQ................... || || || | Rick || || -- || Thanks or Good Luck, || There may be humor in this post, and, || Naturally, you will not sue, || Should things get worse after this, || PCR || || || | | -- | MEB | http://peoplescounsel.orgfree.com/ | BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the | "real world" | | "Most people, sometime in their lives, stumble across truth. | Most jump up, brush themselves off, and hurry on about their business | as if nothing had happen." Winston Churchill | _______________ -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
#8
|
|||
|
|||
root certificates in w98
Chill out dude, check your Windows Update.log ... guess where ALL your updates came from.. exactly where you got that one... -- MEB http://peoplescounsel.orgfree.com/ BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real world" http://groups.google.com/group/the-peoples-law?hl=en - discussion group for general aspects of Law verses the Peoples' of the world "Most people, sometime in their lives, stumble across truth. Most jump up, brush themselves off, and hurry on about their business as if nothing had happen." Winston Churchill Or to put it another way: Morpheus can offer you the two pills; but only you can choose whether you take the red pill or the blue one. _______________ |
#9
|
|||
|
|||
root certificates in w98
"PCR" wrote in message Rick Chauvin wrote: | Hi PCR, | | April 23 you know what Here's is back. "Heroes", yea. There was a big fight about to start! Yeah I made a typo and of course meant Hereo's | "PCR" wrote in message | | [....] | The one I downloaded from the WU Catalog seems to be | v.5.00.2920.0000. But I can't say I ever ran it. If it also came in | from the auto-update-- then, yea, I ran that. Don't go by properties on the exe since it's only the installer version and not in any way the real Certificate version number. | Well that may be the file version of the installer or something, but | as you know if you extract it and look within its rootsupd.inf you | will see half way down what it is within that installer... that | wrapper version you have seems to be v6,0,2195,0. Uhuh. Well... the one taken from the Catalog (& it no longer offers any) says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken from the URL you/MEB posted has... VERSION="11,0,2195,0" there. Did I give that v11 link at one time... maybe I did. I get bold from time to time, but as I've always said partition imaging lets one do whatever they want to test with pure impunity since it's easy to revert anything at any given moment. I ran into some Send Error reports that I could not resolve until I reverted back to a previous C:\ partition image, and it's been fine ever since. One of the updates I had made out of five or six was the v11 Roots, but honestly I don't think it was that which caused my problem at all, but nevertheless in the revert it dumped most of my msfn updates which means I'm back to the last official Roots that WU offered W98SE users, confirmed, which is the v8 I've listed. Don't read much into that for your own situation or problem though, since it was my thing on my own setup. | But if you want to | see what version you have Currently Installed on your computer - you | can go to this registry key: | | HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed | Components\{EF289A85-8E57-408d-BE47-73B55609861A} I see I have v.11,0,2195,0, installed, then, from running that download. Undersood.. | I do know that after that version v6,0,2195,0 installer you have, WU | then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0 | which was as far as I know the last version that WU offered by itself | to W98SE users to download, and that's the one I have decided to | leave installed for now. I wonder how I missed getting up to v8,0,2195,0. WELL, actually, maybe I did get there from the WU auto-update. All I can say is the one I've got from the Catalog is v5,0,2195,0. And that download is all that shows in that Registry key... v.11,0,2195,0. v5,0,2195,0 is Official and was from back in 2004, and v11,0,2195,0 is a very recent one. v8,0,2195,0 is from mid 2006 and is the last Official one for SE afaik. The question is if v11,0,2195,0 is for W98SE too? ..or is it only for W2k/WXP/Vista? ...I don't know, but I do know when v11 is installed on SE that I saw that it reverts much of itself in short order after visiting a few websites, which I found interesting. | Back when I installed v8,0,2195,0 I was updating from v7 and this is a | screenshot of my tracker showing the only things it did: | http://rdchauvin.com/RCUv8,0,2195,0.gif Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com an MS site? Is it trustworthy? Yes it's trustworthy for the most part, but you didn't get that version by going to WU with W98SE that's for sure, you used a direct download link that's really for what OS? | I took & ran this one from a MEB post. It updated me to | v.6.00.2600.0000, going only by its Properties box-- is there another | way? | | Yes as mentioned already above, but again your v.6.00....... | properties that's only the installer wrapper version and not the | actual roots version, go to the registry key to see what you actually | have installed. OK, thanks. | HOWEVER, I can't say it changed anything. I still get a dozen/so | messages saying "revocation information is not available" after | clicking... | https://getca.verisign.com/ | | Can that be normal? Also, various other sites will do same or | similar! | | If I go to that link you give above (putting it in my trusted zone) | still nothing happens - tracking it of too of course. Well, when I | say nothing happens I mean no changes take place on my system, but | this is what the webpage looks like when I go to it: screenshot: | http://rdchauvin.com/VeriSign.gif Hmm. That site & some others gives me the message or a similar one! You didn't get the "revocation" message? But it was doing it before I took v.11,0,2195,0 too, whatever version it replaced! Also, verisign.com does it even after I have it update its certificate! No I did not get a revocation message with v8 installed, and I screenshot showed that is was verified. However, I would not download anything from that website anyway since I don't really know what it is they do or what is, or if it's meant for SE or not, or if OS versions ever matter...? Simply I just did not research it there nor do I have any time or plans to. At the moment v8,0,2195,0 is where I stop, ymmv. There are ways for you to revert back to v8 or earlier via your backup partition images, or, if one can just download the last known Official Roots Certificate from WU that was Officially still for W98SE, and install it - will that revert the v9, v10, or v11, or any combination of them, totally back to v8 status? http://rdchauvin.com/v8,0,2195,0-W98-rootsupd.zip | I'm not really sure what that site is for anyway, and I'm staying at | v8,0,2195,0 for now anyway and too busy to play with other versions | again. I had restored my C:\ partition image last month bringing it | back a few months in status for a number of reasons, and built upon | it from there. Alright. It may not relate to the version of root certificates anyhow. Maybe it's a setting I've got wrong. I don't know. | And here is something else, BUT I seem to already have this one | installed... | | http://support.microsoft.com/kb/323172/en-us | MS02-048: Flaw in Certificate Enrollment Control May Cause Digital | Certificates to Be Deleted | | I (and imagine most of us) did that update too which is from back in | July of 2002, and it's not a roots certificate update like we are | speaking of, but a security update for it. | | I have all the rootsupd.exe offline installers for all past and | current versions anyway if I ever wanted to play, but v8,0,2195,0 is | where I'm livin for now on SE. Probably that is the one I wiped, if it's the last that WU auto-update offered. But I had the problem with that one too-- or possibly I'd not have gone to v.11 either. I'm not sure what you mean, but I do know if you have a backup partition image, you can revert to anything you want; iow, if you imaged back to a v8 timeline, exported a registry of that key, reimaged back to current, and then delete current and merged what you had at v8 status, you would absolutely be at v8 roots status; but again I have honestly no idea of what a wrong Roots installed would cause with what right/wrong happenings, all I know is I know for sure that v8 is for W98SE... as for v9, v10, and v11 - I'm not sure, yet. Rick -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
#10
|
|||
|
|||
root certificates in w98
Rick Chauvin wrote:
| "PCR" wrote in message | | Rick Chauvin wrote: || Hi PCR, || || April 23 you know what Here's is back. | | "Heroes", yea. There was a big fight about to start! | | Yeah I made a typo and of course meant Hereo's | || "PCR" wrote in message || || [....] || The one I downloaded from the WU Catalog seems to be || v.5.00.2920.0000. But I can't say I ever ran it. If it also came in || from the auto-update-- then, yea, I ran that. | | Don't go by properties on the exe since it's only the installer | version and not in any way the real Certificate version number. I know that now, thanks, Chauvin. || Well that may be the file version of the installer or something, but || as you know if you extract it and look within its rootsupd.inf you || will see half way down what it is within that installer... that || wrapper version you have seems to be v6,0,2195,0. | | Uhuh. Well... the one taken from the Catalog (& it no longer offers | any) says... VERSION="5,0,2195,0"... in Rootsupd.inf. The one taken | from the URL you/MEB posted has... VERSION="11,0,2195,0" there. | | Did I give that v11 link at one time... maybe I did. Yep-- in this thread...!... FWIW, this is the direct download link for the roots certificate http://download.windowsupdate.com/ms...n/rootsupd.exe I even took the download separately from the one I already had from MEB & checked inside that RootsUpd.inf. | I get bold from | time to time, but as I've always said partition imaging lets one do | whatever they want to test with pure impunity since it's easy to | revert anything at any given moment. D:\WINDOWSfind /n /i "0,2195,0" system.dat ---------- system.dat [4397] Version6,0,2195,0 ____ Locale* ____ ¶ ComponentIDWindows Roots UpdateŠ ( ....snip... Hmmm. It looks like my Dartition has a Registry of v.6,0,2195,0 for that root certificate update-- not the v.8 you report. But, as it wasn't for you during your test, I'm not sure the v.11 Roots I've got now is problematic. But you have chosen not to keep it, & I can only get v.6 back with a full restore to my backup partition. It isn't at the WU Catalog now, & my earlier download from it is v.5 only. | I ran into some Send Error reports that I could not resolve until I | reverted back to a previous C:\ partition image, and it's been fine | ever since. One of the updates I had made out of five or six was the | v11 Roots, but honestly I don't think it was that which caused my | problem at all, but nevertheless in the revert it dumped most of my | msfn updates which means I'm back to the last official Roots that WU | offered W98SE users, confirmed, which is the v8 I've listed. It looks like I never did have v8 Roots-- but I always took every auto-WU offered for Win98SE! | Don't | read much into that for your own situation or problem though, since | it was my thing on my own setup. I don't believe I ever had the problem you report of "Send Error". || But if you want to || see what version you have Currently Installed on your computer - you || can go to this registry key: || || HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed || Components\{EF289A85-8E57-408d-BE47-73B55609861A} | | I see I have v.11,0,2195,0, installed, then, from running that | download. | | Undersood.. | || I do know that after that version v6,0,2195,0 installer you have, WU || then offered for W98SE users v7,0,2195,0 ...and then v8,0,2195,0 || which was as far as I know the last version that WU offered by || itself to W98SE users to download, and that's the one I have || decided to leave installed for now. | | I wonder how I missed getting up to v8,0,2195,0. WELL, actually, | maybe I did get there from the WU auto-update. All I can say is the | one I've got from the Catalog is v5,0,2195,0. And that download is | all that shows in that Registry key... v.11,0,2195,0. | | v5,0,2195,0 is Official and was from back in 2004, and v11,0,2195,0 | is a very recent one. v8,0,2195,0 is from mid 2006 and is the last | Official one for SE afaik. Did it come in with the auto-WU, or did you have to click for it? | The question is if v11,0,2195,0 is for W98SE too? ..or is it only for | W2k/WXP/Vista? ...I don't know, but I do know when v11 is installed | on SE that I saw that it reverts much of itself in short order after | visiting a few websites, which I found interesting. Hmmm. I don't know what to make of it. Anyhow, every time I go to that Verisign site I will get that "revocation certificate is not available" requestor. SO, mine isn't self-ccorrecting, anyhow. || Back when I installed v8,0,2195,0 I was updating from v7 and this || is a screenshot of my tracker showing the only things it did: || http://rdchauvin.com/RCUv8,0,2195,0.gif | | Uhuh. Mine shows v.11,0,2195,0 there. Is download.windowsupdate.com | an MS site? Is it trustworthy? | | Yes it's trustworthy for the most part, but you didn't get that | version by going to WU with W98SE that's for sure, you used a direct | download link that's really for what OS? Well, I got it from that URL both you & MEB posted. You did attach a disclaimer, though. || I took & ran this one from a MEB post. It updated me to || v.6.00.2600.0000, going only by its Properties box-- is there || another way? || || Yes as mentioned already above, but again your v.6.00....... || properties that's only the installer wrapper version and not the || actual roots version, go to the registry key to see what you || actually have installed. | | OK, thanks. | || HOWEVER, I can't say it changed anything. I still get a dozen/so || messages saying "revocation information is not available" after || clicking... || https://getca.verisign.com/ || || Can that be normal? Also, various other sites will do same or || similar! || || If I go to that link you give above (putting it in my trusted zone) || still nothing happens - tracking it of too of course. Well, when I || say nothing happens I mean no changes take place on my system, but || this is what the webpage looks like when I go to it: screenshot: || http://rdchauvin.com/VeriSign.gif | | Hmm. That site & some others gives me the message or a similar one! | You didn't get the "revocation" message? But it was doing it before | I took v.11,0,2195,0 too, whatever version it replaced! Also, | verisign.com does it even after I have it update its certificate! | | No I did not get a revocation message with v8 installed, and I | screenshot showed that is was verified. However, I would not download | anything from that website anyway since I don't really know what it | is they do or what is, or if it's meant for SE or not, or if OS | versions ever matter...? Simply I just did not research it there nor | do I have any time or plans to. At the moment v8,0,2195,0 is where I | stop, ymmv. Uhuh. But I think glee also posted the URL for that VeriSign site... "glee" wrote in message ... | Read this: | https://getca.verisign.com/clientRoot.pdf | for instructions on how to install the certificate. | -- | Glen Ventura, MS MVP Shell/User, A+ | http://dts-l.org/ | http://dts-l.org/goodpost.htm I get the same page shown in your image-- but only after clicking to proceed on the requestor about "revocation" multiple times. If I click NOT to proceed, the page won't show. If I look at & take the certificate, the same STILL will happen when next I visit the site. I should see what InCtrl5 will report about all that activity. Hmmm. I'm thinking about my full system backup now! | There are ways for you to revert back to v8 or earlier via your backup | partition images, As I showed above, I can only get to v.6 by reverting to my full system backup. | or, if one can just download the last known Official | Roots Certificate from WU that was Officially still for W98SE, and | install it - will that revert the v9, v10, or v11, or any combination | of them, totally back to v8 status? | | http://rdchauvin.com/v8,0,2195,0-W98-rootsupd.zip OK, I've taken the download, thanks. So, now I can get to v.8, which I never had. But I must also investigate what VeriSign has been doing to me now-- with a Google search & with InCtrl5. McAfee & Kerio never complained about VeriSign is one good thing. I wonder whether v.8 is the reason you are immune! || I'm not really sure what that site is for anyway, and I'm staying at || v8,0,2195,0 for now anyway and too busy to play with other versions || again. I had restored my C:\ partition image last month bringing it || back a few months in status for a number of reasons, and built upon || it from there. | | Alright. It may not relate to the version of root certificates | anyhow. Maybe it's a setting I've got wrong. | | I don't know. Yea. I'm fairly sure the same was happening with v.6 Roots. || And here is something else, BUT I seem to already have this one || installed... || || http://support.microsoft.com/kb/323172/en-us || MS02-048: Flaw in Certificate Enrollment Control May Cause Digital || Certificates to Be Deleted || || I (and imagine most of us) did that update too which is from back in || July of 2002, and it's not a roots certificate update like we are || speaking of, but a security update for it. || || I have all the rootsupd.exe offline installers for all past and || current versions anyway if I ever wanted to play, but v8,0,2195,0 is || where I'm livin for now on SE. | | Probably that is the one I wiped, if it's the last that WU | auto-update offered. But I had the problem with that one too-- or | possibly I'd not have gone to v.11 either. | | I'm not sure what you mean, but I do know if you have a backup | partition image, you can revert to anything you want; iow, if you | imaged back to a v8 timeline, exported a registry of that key, | reimaged back to current, and then delete current and merged what you | had at v8 status, you would absolutely be at v8 roots status; but | again I have honestly no idea of what a wrong Roots installed would | cause with what right/wrong happenings, all I know is I know for sure | that v8 is for W98SE... as for v9, v10, and v11 - I'm not sure, yet. Thanks a lot for all you've done & all this advice. I think I've proven I can only revert to v.6 by doing an export of my backup Registry the way you suggest. I'm fairly sure v.6 won't prevent VeriSign from putting up that requestor. Maybe v.8 will; thanks again for that download. But I must first investigate what VeriSign has been doing, especially by my clicking to "proceed" at its requestor. I even clicked to "view" its certificate & to update it-- & STILL it always will offer it again! Let me go see what MEB is saying now. | Rick | | | -- | Thanks or Good Luck, | There may be humor in this post, and, | Naturally, you will not sue, | Should things get worse after this, | PCR | -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, Should things get worse after this, PCR |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Damaged Certificates, ZA free, and AVG dysfunction? | glee | General | 8 | September 3rd 08 03:29 AM |
security certificates warnings at every site | brenda_northway via WindowsKB.com | General | 1 | March 29th 07 04:02 AM |
need help restoring certificates | Gary Roach | Disk Drives | 5 | October 25th 06 03:34 AM |
Certificates | Jeff | General | 7 | March 12th 06 06:55 PM |
need help restoring certificates | Gary Roach | General | 0 | August 6th 05 07:44 PM |