AstroSkipper
Content Type
Profiles
Forums
Events
Posts posted by AstroSkipper
-
-
1 hour ago, maile3241 said:
Normally you need these updates to fix the error. But I don't know if it works in W2k3.
One thing is clear. The mentioned updates are for Windows XP Embedded and definitely not for Server 2003. So that won't work.
and truth be told a bit off-topic. 
0 -
3 hours ago, Dave-H said:
I'm still seeing this in my System Event Log regularly.
I still have automatic updates set to tell me if there are any!
I guess this is because it can't use the proxy.I disabled automatic updates a long time ago. I thought this app would use IE engine to check for updates. So actually you had to keep HTTPSProxy running generally. I think you don't really want to do that. Therefore disable automatic updates! Unfortunately there will be no more updates in future.
But since restoring MU you can check manually for updates at any time. 
0 -
24 minutes ago, maile3241 said:
Too bad. I'm still wondering how I got it to work without a proxy for a short time in December.
Microsoft had changed a lot in the past. Maybe they had switched back to old ciphers in this short time in Dezember.
0 -
2 hours ago, maile3241 said:
Is there a way to update the ciphers to reach the windows update site without a proxy?
Due to the fact that in Windows XP (and 2000 too) you can only use IE or IE engine to access to MU and the ciphers of IE are outdated you have to use ProxHTTPSProxy or HTTPSProxy to add modern, more recent ciphers to IE or IE engine. Therefore is the answer from my point of view: No!
0 -
1 hour ago, Dave-H said:
Thanks largely to you!
You're welcome!
1 hour ago, Dave-H said:The speed hit is only noticeable if I use 360Chrome with the "Use IE proxy" option enabled.
Did you add HTTPSProxy and ProxHTTPSProxy to MalwareBytes' exclusions list? I have excluded them in Avast.
0 -
3 hours ago, Dave-H said:
No it isn't that.
In my Windows XP system Avast Premier is the main security solution in combination with Windows 10 Firewall Control XP. Avast works perfectly but the web protection causes in a lot of cases an huge loss of speed especially while surfing, connecting via VPN or downloading files although a lot of exclusions have been made by me. In such cases switching off web protection is the only way to have full speed again. The older the computer is, the greater the loss. And my computer running Windows XP is 21 years old.
0 -
59 minutes ago, Dave-H said:
Just for completeness, now working fine in 360Chrome 13.5.
@Dave-H Great! I'm glad your system has got back all features you wanted to have.
1 -
56 minutes ago, xpandvistafan said:
Do you know where to find it? I only find something called extreme explorer when I search it up.
Here:
Just to clarify: 360Chrome = 360 Extreme Explorer
0 -
1 hour ago, Dave-H said:
No it doesn't matter, I was just wondering why the loss of speed was so great with a locally running proxy.
The proxy has a lot to do. Checking web sites, generating cerificates, comparing web site addresses with config.ini settings and so on. Poor proxy!
And there might be another cause for such loss of speed. You're running Mwarebytes 3.5.1.2522. It has a web filter function and this might cause such loss of speed either. Switch off web control function and do your speed test once again!0 -
1 minute ago, Dave-H said:
I was just a bit puzzled. I would expect some loss of speed, but not a third of what it should be!
But for these purposes only speed doesn't matter. Isn't it?
0 -
25 minutes ago, Dave-H said:
Do you know why there are two entries for HTTPSProxy.exe in Task Manager?
I do have that too and that's absolutely normal. A lot of programs have one main instance calling up a second one probably with different tasks. For example 360Chrome does the same. First 360Loader.exe calling up 360chrome.exe calling up a second instance of 360chrome.exe and more of them.
25 minutes ago, Dave-H said:Also, would you expect using HTTPSProxy to significantly slow down your internet connection speed?
Of course there are a lot of proxies slowing down speed. Due to the fact that I use these proxies for Internet Explorer access or Internet Explorer engine access only it doesn't matter for me.
0 -
On 2/11/2022 at 4:42 PM, Dave-H said:
I still wonder why it worked for some and not others.
@Dave-H This can be answered easily. It depends on what the user has done when installing ProxHTTPSProxy CA certficate. If you import ProxHTTPSProxy CA certficate by clicking right mouse button it'll be installed under Trusted Root Certification Authority but for current user. If you import ProxHTTPSProxy CA certficate by using Microsoft Management Console mmc or Internet Options Control Panel applet selecting "show physical stores" of IE you've got the option to point to Trusted Root Certification Authority but for local computer. Therefore all of us installed that certificate under Trusted Root Certification Authority physical store but some of us under account current user and others under account local computer. This is the reason why heinoganda's ProxHTTPS Cert Installer is working for all of us. His installer imports due to automatical selection the certificate PROXCERT.p7b (other format of this certificate) correctly but of course installing the old well known certificate valid until 2025 only. This installer is a modified Roots Certificates Update installer and you know these certificates it has to install are added under account local computer generally.
Furthermore there is a general positive effect for those loving Windows XP (and 2000 or Vista). If correctly integrated into the system we are all now able to use a freshly generated 10 years valid root certificate of ProxHTTPSProxy or HTTPSProxy as long as Windows XP, Internet Explorer access to WWW, TLS 1.2 functionality, Microsoft Update for Windows XP or the user himself still exists.
2 -
20 minutes ago, xpandvistafan said:
I am not too familiar with generating certificates for ProxHTTPSProxy. Where are you supposed to generate it?
As @maile3241 already said opening of ProxHTTPSProxy.exe generates automatically a new CA.crt if none is in its program folder. But first you have to delete all certificates in certs subfolder and update your cacert.pem as described in document file.
1 -
23 minutes ago, Dave-H said:
Once you had it to directly work with, you fixed it, thank you again!
You're absolutely right! Talking and philosophizing about a problem you haven't got in your own system is contraproductive. So I produced the problem you all had got and could analyze what was going on. The best way someone can have. Btw I installed ProxHTTPSProxy 3e (you can remember!) for testing purpose and it is working perfectly.
0 -
12 minutes ago, Dave-H said:
You can do it through the Internet Options Control Panel applet if you select "show physical stores" BTW.
Finally, all's well that ends well, and thank you so much everyone, especially of course @AstroSkipper, for sticking with this for so long.
Cheers, Dave.I already knew the alternative way to import certificates using IE but I want to do it in a clear safe way. It was a really long odyssey to find a final solution. I hope it'll work for all of us. Btw I provided links to Windows Update Reset Tool (Script). Have you already looked into? I think it is an interesting tool if problems due to MU occur.
0 -
Final fix of error code 0x80072f8f while accessing WU or MU web site
@Dave-H, @RainyShadow, @maile3241 and all other interested people,
I have definitely solved the problem getting error code 0x80072f8f. I've done a second ProxHTTPSProxy installation just due to testing purpose. I let ProxHTTPSProxy generate a new CA.crt valid until 2032 by deleting old CA.cert file in ProxHTTPSProxy's program folder and opening ProxHTTPSProxy.exe afterwards. Then I installed this root certificate. But it didn't work either. I got error code 0x80072f8f too. I analyzed what had happened and found out it was installed in Trusted Root Certification Authority but for current user only. And that's the cause of the problem. It has to be installed in Trusted Root Certification Authority of local computer anyway. How is it done? Open console by typing mmc, add a snap-in for certificates, then choose for local computer and import your recently generated ProxHTTPSProxy CA certificate to Trusted Root Certification Authority. Finished.
First a screenshot of MU using ProxHTTPSProxy along with recently generated ProxHTTPSProxy CA certificate valid until 2032:
And here is a screenshot of my Trusted Root Certification Authority - local computer:
Hope this will be the final solution to get rid of error code 0x80072f8f forever!
PS: More detailed information relating to ProxHTTPSProxy and HTTPSProxy you can find in this article:Kind regards, AstroSkipper
3 -
21 minutes ago, maile3241 said:
Right. These are urgently needed, otherwise it won't work. I edited my post above again
Ok, on the one hand you solved your connection problem using HTTPSProxy and that's fine, but on the other hand 2025 is your deadline of accessing to MU web site. @Dave-H won't help that either because the original provided ProxHTTPSProxy root certificate doesn't work for him accessing to MU web site.
0 -
4 minutes ago, maile3241 said:
These are mine
Ok, you have installed the same ProxHTTPSProxy root certificate twice, one for ProxHTTPSProxy itself and one for HTTPSProxy. Is that correct?
0 -
1 minute ago, maile3241 said:
For me it only works with this one.
So how many ProxHTTPSProxy root certificates do you have installed in your system's Trusted Root Certification Authority? Please have a look and provide a screenshot!
0 -
3 minutes ago, maile3241 said:
Correctly.
In my system both proxies generated their own root certificates to work with. I do not use the pregenerated root certificate of ProxHTTPSProxy either and both are working flawlessly. Just a reminder!
0 -
7 minutes ago, maile3241 said:
This certificate comes from ProxhttpsProxy. I don't think it's a risk
Just to clarify and to avoid misunderstandings you copied the ProxHTTPSProxy root certificate in HTTPSProxy's program folder to use it there? Are you sure? I can't hardly believe that.
0 -
13 minutes ago, AstroSkipper said:
replace it with mine
Providing a personal certificate which was generated only for your proxy isn't a good idea due to security reasons. Using this certificate by other people is a security risk for your encrypted connections. And I doubt that the cause of failure was the HTTPSProxy CA certificate only. It was most likely the combination of HTTPSProxy CA.cert and deleting certs in certs subfolder.
0 -
16 minutes ago, maile3241 said:
Close httpsproxy. Delete all Certificates from the folder "Certs". Delete the generated Certificate from httpsproxy and replace it with mine. Call up Windows Update again and try to search for updates.
It works fine for me.
So I've been right. You forgot to delete all certificates in certs folder the last time when you had generated a new HTTPSProxy CA certificate. Deleting was the solution. I mentioned that several times in the past. As I told you if one of them works the other has to work too. They are from same source.
0 -
2 hours ago, maile3241 said:
httpsproxy gives me problems too.
Due to your HTTPSProxy failure did you do what I advised you urgently some posts before?:
QuoteAt first avoid running both in RAM. That won't work at all. You have to exit the unused one to use the other.
You can' t use both proxies in RAM at the same time.
Then another idea. You said you had generated a new HTTPSProxy CA certificate in the past. Did you delete all certificates in certs subfolder of HTTPSProxy's program folder subsequently? If not it won't work at all.0
On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019
in Windows XP
Posted · Edited by AstroSkipper
addition
@Dave-H Just for you I'll change my automatic updates setting to "Notify me but don't automatically dowload or install them" and report what will happen and if such entries will appear in my event log. You know we've made our systems a bit comparable.