Jump to content

heinoganda

Member
  • Posts

    848
  • Joined

  • Last visited

  • Days Won

    17
  • Donations

    0.00 USD 
  • Country

    Germany

Everything posted by heinoganda

  1. On the topic of unique identifiers for Windows Update or Microsoft Update by "rvkroots.exe" and "rootsupd.exe". Have taken the trouble and made in VMware a clean Windows XP SP3 installation. Now, the current status (10/21/2015) are not root certificate update and revoked certificates offered more! What ultimately means that the unique identifier of "rvkroots.exe" and "rootsupd.exe" no more influence has in Windows Update or Microsoft Update (As for me, I would this regard, do not change these Version entries. I see an attack point to the Windows XP user to get rid not pay for extended support.)! (In May 2014 it was still relevant because I have occupied myself at an early stage with the problem of root certificate updates. Because Microsoft is starting as Windows Vista, after a system update, only the root certificate loading when required or tested for revoked certificates and thus stripped on an elegant way of Windows XP users.) Thus, this issue has done. Note: Has anyone ever looked at the date to the contribution of "rvkroots.exe" and "rootsupd.exe" I have posted on the forum? That irritates me very much. @blackwingcat In "rvkroots.exe" one can understand the version number yet, but with "rootsupd.exe" there is a future confusion if everyone thinks he would have updated again at a current time. Here's an excerpt of my updated list: Secondly, no problem at WU and MU is a corresponding query in order to introduce users to exclude from WU or MU. (This may in Windows 2000 and older versions of Windows to play no role, but in Windows XP, there still functional updates are distributed.)
  2. @monroe Do not be angry, but I posted a tutorial here where one lets me current Roots certificates and revoked certificate for Windows XP again. Now, the steps followed exactly, then you will understand what is at stake with these version numbers! Incidentally, there is not that you should download and install only "rvkroots.exe" and / or "rootsupd.exe".
  3. @blackwingcat The version number "rvkroots.exe" and "rootsupd.exe" to write to the registry are unique identifiers for Windows Update or Microsoft Update and have no effect on the functionality of the certificates! Regarding submitted the update "WindowsXP-KB3055973-v3-x86-Embedded-ENU.exe" where rsaenh.dll (5.1.2600.6834) and schannel.dll (5.1.2600.6838), this update does not apply to ECDSA encryption. KB3055973 adds the following functionality: This update adds support for the following Advanced Encryption Standard (AES) cipher suites in the Schannel.dll module for Windows Embedded POSReady 2009:TLS_RSA_WITH_AES_128_CBC_SHA AES128-SHATLS_RSA_WITH_AES_256_CBC_SHA AES256-SHANote: These cipher suites are based on the RC4 algorithm. This means that ECDSA certificates regularly not detected using the standard mechanism and not be registrable. However, if one enters directly into the Registry ECDSA certificates then these are also in the Certificate Manager visible, unfortunately without function. (Belief that I read on your blog that where you enter the certificates by Registry entry, which would explain why some ECDSA certificates are available. At least that would explain why you ECDSA certificates get displayed.) Addition: Now I have time your certificate update downloaded and looked at times more exactly where I realized where the ECDSA certificates come. You're using the Certmanager from Windows Vista to import the certificates. (ECDSA certificates are supported as Windows Vista (cipher suite)!) Note: "Necessity is the mother of invention!" In schannel.dll I also found (1.2.840.10045.4.3.3), which raises some questions in the room. It should at this point a C++ specialist look at to get more experience. So on the edge, Find out more detail about ECDSA encryption (SSL Universal) as well as "Windows XP cipher suite", then you'll understand why these certificates can not function. A consolation prize still am, it also failed. This would ECDSA certificates work a profound engagement in the encryption in the operating system take place. @vinifera You can even the constituents of the decompilation updates and quickly check if there is not any data about you is sent to Microsoft. Joking apart, I am because of the current problems of so great Telemetry Updates (Win7, Win8) a lot of thought, in this regard could not detect any network traffic. According to me known official information where partial Windows XP is in the US military still in use, because I can not imagine that because the ship of Telemetry data is desired me. Well, then there is still the one installed no more updates.
  4. @dencorso First of all thanks for the info. What bothers me in Firefox the limited quality when playing videos (H264) at HTML5, maybe you can show me an easy way how to Windows XP at this H264 videos can watch in full HD. Would rather stay at the Chrome browser. @all The missing .NET Framework 2.0 update from September 2015 (NDP20SP2-KB3074546-x86.exe) is available! http://download.windowsupdate.com/c/csa/csa/secu/2015/09/ndp20sp2-kb3074546-x86_b00e38544466254f6c7314127d2f658078c9d53a.exeThanks to blackwincat for the information on his blog.
  5. That with the version number has to do with "WU" or "MU", where the version number is read from the registry and officially the last relevant version numbers in "rvkroots.exe 5,0,2195,0" as well in "rootsupd.exe 40,0,2195,0" are crucial, which may result in deviation to the last (older) official updates from "WU" or "MU" are installed again until the version numbers match. (This situation have been May 2014th) As reported by "dencorso" has been carried out correctly, you have to do this only once and must in future download only the "*.sst" files and archive again in "rvkroots.exe" and "rootsupd.exe". @glnz The first three are for Windows XP and the last two are for Office Compatibility Pack. With me no problems with these updates have occurred. Note: Officially for Windows XP since May 2014 no root certificate updates and Revoked Certificates (safety Relevant) available! @all non english XP Version User Reminder about KB3055973 (only for English-language Windows XP), since there is no official update for other language versions of Windows XP has until now appeared! (rsaenh.dll (5.1.2600.6834) and schannel.dll (5.1.2600.6838) English version in all language versions of Windows XP available, therefore easily applicable to other language versions of Windows XP if language restriction is lifted in "update_SP3QFE.inf" !) addendum: @all Lately I've noticed that more and more Web pages with ECDSA Encrypts are (Cloadflare with Universal SSL), where Windows XP are not supported as well as these certificates are not accepted. This are Web sites that are encrypted with ECDSA accessible on Windows XP only with the Firefox Web browser. The Chrome browser has the problem that he accesses the certificate management by the operating system back and so it happens that does not display the Chrome browser these pages. Is there a way in this direction under Windows XP this ECDSA certificates are processed? (Already tried with the help of Windows 7 to export them from the registry and belongings imported in Windows XP, will indeed appear in the Certificate Manager, but without funtion when tested with the Chrome browser.)
  6. @monroe Procedure for updating the Roots certificates and revoked certificates > how to make this in this post These updates do I install on my regular Windows XP! > looked this post
  7. Released Updates on 10/13/2015: WindowsXP-KB3080446-x86-XXX.exe 10/12/2015 WindowsXP-KB3093983-x86-XXX.exe 10/12/2015 (cumulativ) IE7-WindowsXP-KB3093983-x86-XXX.exe 10/12/2015 (cumulativ) IE8-WindowsXP-KB3093983-x86-XXX.exe 10/12/2015 (cumulativ) WindowsXP-KB3094996-x86-XXX.exe 10/12/2015 It should be mentioned here still KB3097966 (Security Advisories) for blocking div. Certificates. (under Windows XP with "rvkroots.exe")
  8. @glnz Thanks for asking, I'm fine, and the Windows XP updates is up on an update for the .NET Framework 20 all right. @Molecule It happens that the WSUS page on strike every now and then. Just try more times. @Bersaglio & @Acheron With regard to the Microsoft Security MS15-101 Bullitins you get here (https://support.microsoft.com/en-us/kb/3089662) even more information which versions are affected by the .NET Framework.
  9. Today I had to find the WindowsXP-KB3077715-x86-XXX.exe 09/07/2015 (Cumulative Time Zone Update) is no longer available! Apparently the update has been withdrawn. Released Updates on 09/08/2015: NDP40-KB3074547-x86.exe 09/04/2015 WindowsXP-KB3087038-x86-XXX.exe 09/04/2015 (cumulativ) IE7-WindowsXP-KB3087038-x86-XXX.exe 09/04/2015 (cumulativ) IE8-WindowsXP-KB3087038-x86-XXX.exe 09/04/2015 (cumulativ) WindowsXP-KB3077715-x86-XXX.exe 09/05/2015 (rereleased) WindowsXP-KB3087039-x86-XXX.exe 09/05/2015 Finally, lacking a security update for the .NET Framework 2!
  10. If "Automatic Updates disabled" these are set to "Notify me but do not automatically download or install". If the notification icon for updates on the taskbar appears then should the Internet Explorer from "Windows Update" or "Microsoft Update" function again. Then you can turn off Automatic Updates again.
  11. @ Molecule for example "NDP40-KB3072309-x86.exe" search KB Article (https://support.microsoft.com/en-us/kb/3072309) then you'll find on this page Update replacement information This update replaces previously released update 3048074. A complete list (.NET Framework 3.5 sp1 & 4) could look like this:
  12. @ tomasz86 Thanks for the note, as has probably crept an error sheer KB's, have corrected the list. @ Mcinwwl List of updates for .NET Framework on Windows XP after April 2014 @ dencorso Silverlight extract with conventional packer, then extract "silverlight.7z". When first installed first "silverlight.msi" run and then "Silverlight.msp". Run For Update Only "Silverlight.msp". Since you need no longer worry about any annoying changes that no one needs!
  13. @ Bersaglio Thank you for the info, I changed the list. Would be nice if you could find out a little earlier or can you give me a one source for these links?
  14. @ all The following updates are available since today: WindowsXP-KB3087985-x86-XXX.exe 08/18/2015 (mshtml.dll / Not Cumulative!) IE7-WindowsXP-KB3087985-x86-XXX.exe 08/18/2015 (mshtml.dll / Not Cumulative!) IE8-WindowsXP-KB3087985-x86-XXX.exe 08/18/2015 (mshtml.dll / Not Cumulative!) WindowsXP-KB3077715-x86-XXX.exe 08/18/2015 (Cumulative Timezone Update) (is no longer offered, apparently was the update withdrawn / 09/07/2015) @ glnz According to my list, I miss the following updates for the .NET Framework:
  15. Slowly it becomes narrower, KB3055973-v3 was not available to install on Windows XP with another language, except in English version (http://www.msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/page-22#entry1103540)! KB3075221 (https://support.microsoft.com/en-us/kb/3075221) not available for Remote Desktop 7 and a update for the .NET Framework 3.0 (https://support.microsoft.com/en-us/kb/3078662) is also not available (the latter in both you have the update for Vista knit an update for XP ).
  16. @dencorso All your listed .NET 2.0SP2 to 4.0 updates are international (= multilingual), that is correct! NDP40-KB2931365-x86.exe (05/13/2014) was replaced by NDP40-KB2978125-x86.exe (11/11/2014)
  17. Does not matter under XP. For example Winrar SFX with follow comment Setup=update\update.exeTempModeSilent=1Overwrite=1 Because nothing is changed! From original Apply on new "update_SP2QFE.inf" and "branches.inf"! Except for string "BUILDTIMESTAMP". //Edit All four updates I have downloaded from the WSUS catalog (http://catalog.update.microsoft.com/v7/site/Home.aspx), extracted with parameter "x" and has obtained nothing like that.
  18. @Molecule First the following link download KB3057839 with "Internet Explorer" (other browsers are not accept) http://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3057839%20Posready. Extract KB3057839 by using the parameter "-x". Now copy from KB3057839 to kb3037572 the files "spmsg.dll" and "spuninst.exe", in the "update" directory the files "spcustom.dll", "update.exe" and "updspapi.dll". In kb3037572\update\update.exe replace with HEX Editor "E8 02 BA 02 00 85 C0 75 41" by "E8 02 BA 02 00 31 C0 EB 41". ;Thanks to harkaz changes on "update_SP2QFE.inf" changes on "branches.inf" This should be working, according to this pattern, the other updates should not be a problem.
  19. @hmuellers If you can install the newer updates, this has done with the older updates. Very fine.
  20. @ Molecule The dotNET1.1sp1 Updates (German) I proceeded as follows (For example change in KB3037572): update_SP2QFE.inf branches.inf Replacing the Update Engine from a Update from Windows XP spmsg.dll spuninst.exe update\spcustom.dll update\update.exe (modified, REPLACE "E8 02 BA 02 00 85 C0 75 41" BY "E8 02 BA 02 00 31 C0 EB 41") ;Thanks to harkaz update\updspapi.dll List of updates for the .NET Framework 1.1 SP1: KB2972207 09/09/2014 KB2978114 11/11/2014 KB3037572 04/13/2015 KB3023211 05/12/2015 Best first test in a virtual environment. Hope I can help you with it, so that you can modify the updates.
  21. NDP20SP2-KB2932079-x86.exe from 05/13/2014 replaced by NDP20SP2-KB2978124-x86.exe from 11/11/2014 //Edit NDP40-KB2931365-x86.exe from 05/13/2014 replaced by NDP40-KB2978125-x86.exe from 11/11/2014 Could be if KB2978124 is installed, which one because a newer patched files already exists KB2932079 can not install. Just as it is KB2932079 and KB2931365 unnecessary.
  22. @Atari800XL As can be "KB3055973-v3" only on English-language Windows XP install, I have (Windows XP German) under "%windir%\system32" file "rsaenh.dll" and "schannel.dll" looked under Taken shaft language where these are available in english (US). For this reason I have changed so that it can be installed "KB3055973-v3" is International (any language of Windows XP)! https://www.microsoft.com/en-us/download/details.aspx?id=48214&WT.mc_id=rss_alldownloads_securtiyupdates (only for english Windows XP installable) Adds support for TLS 128-bit & 256-bit Advanced Encryption Standard (AES) cipher suites (You can "KB3055973-v3" download, then extract with parameter "-x". In the file under "update\update_SP3QFE.inf", under strings in "LangTypeValue = 0x09" Change "LangTypeValue = 0x0" and the "Update.exe" file replace with HEX Editor "E8 02 BA 02 00 85 C0 75 41" BY "E8 02 BA 02 00 31 C0 EB 41")
  23. For non-English Windows XP where KB3055973-v3 can not install. Because the files "rsaenh.dll" and "schannel.dll" are in English in all language versions of Windows XP, can thus "KB3055973-v3" also be installed in other language versions of Windows XP, if it were not a restriction of the installer on Windows XP English. For this reason I have "KB3055973-v3" far changed that it can be installed on all language versions of Windows XP. Those interested on the update please PM to me.
  24. @glnz There is no problem if Microsoft Installer 4.5 Redist "KB942288-v3" after installed!
  25. With July Patchday update "KB3072630" was delivered for Microsoft Installer 4.5, which does not query the existing version exists to patch files. Windows XP SP3 has been normally Microsoft Installer 3.1, which means the following files under "%windir%\system32" msi.dll to version 4.5.6002.23731, msiexec.exe to version 4.5.6002.23731 and msihnd.dll to version 4.5.6002.23415 updated, If Microsoft Installer 4.5 Redist "KB942288-v3" is already installed, there are no problems. However, if are in "%windir%\system32" which files msimsg.dll and Msisip.dll identify only version 3.1, you should Microsoft Installer 4.5 Redist "KB942288-v3" install so that there is no malfunction of the Microsoft Installer.
×
×
  • Create New...