Dave-H

Thanks, I have run the updater recently, but I went into the Internet Options Content tab and deleted a huge number of expired certificates, some expired for many years, and then ran it again. I was surprised to see that a lot of the expired certificates had come back again, but I guess that's normal and expected! I am surprised that the errors have started happening occasionally on my netbook too now, which has never even had the certificates updater installed, let-alone run, but maybe i now need to do that! I'll see how it goes now.

Still not working! I got one notification e-mail a couple of days ago, but it was for a post from several days before that! I've checked all my settings, and everything seems to still be correct. Any ideas what might be wrong anyone?

Thanks Den! I don't think the article applies here as it's mainly about having no internet connection, which I have of course! I have tried re-registering those files, I'll see if it makes any difference. They all registered fine immediately, except for Initpki.dll, which only registered successfully after a long delay for some reason.

I'm still getting the strings of errors in my Application Event Log, as you can see from this. It's also started happening on my netbook as well now! The yellow warning shown states "Reached crypt32 threshold of 50 events and will suspend logging for 60 minutes"!

Ah, thanks very much, that's exactly what I mean! I wonder why I'm not getting any then, it's worked for years, and suddenly, nothing.

After the forum server crash, I got e-mail notifications back for a few days, although most seemed to be going into my spam filter for some reason, but I'm now not getting any notifications at all. I've checked my user settings, and they still seem to be correct. Is anyone else still getting notifications?

Ah thanks, I hadn't realised it was a kernel update, so that will indeed be the problem!

OK, thanks guys, so it looks as if KB4230450 is enough. As I said earlier, I've never installed KB4316682, but I did have KB4019276 already installed. https://www.howsmyssl.com shows TLS 1.2 working in IE8 with HTTPSProxy switched off (albeit with the certificate errors already mentioned) so I guess it's all OK. BTW, sorry for the late response, am I the only one not getting any e-mail notifications from the forum now? I've checked my forum settings and they are correct, but I had no notification of these recent posts.

Is anyone else having trouble with KB4230467 apparently installing OK but then asking to be installed again, over and over? It's happening on one of my machines but not the other, so I'm wondering if it's the oem problem again.

Did you have @heinoganda's version of KB4134651 installed from last month, which kept the old oleaut32.dll instead of the buggy replacement? It doesn't look as if that file was replaced this month, but maybe SFC is suddenly not liking it, although it seems OK here.

I am a bit confused here! I have KB4019276 installed (from February's updates) but not KB4316682. Does today's update KB4230450 actually supersede it? I have added the registry data to reveal the TLS 1.1 and 1.2 entries in the IE advanced settings options, and they were both already ticked, so presumably they were already activated, the registry keys just add them to the interface so you can turn them off if you want to.

While I was aware of the expression, I must say that I didn't know that the original "Larry" was a boxer. He was actually an Australian called Larry Foley apparently, and the phase originated there rather than in the UK. He boxed in the late 1800s, and apparently never lost a fight!

Good to hear!

Well I've fixed mine too! All I had to do in fact was to disable and re-enable the "Enable Java content for browser and Web Start applications" option in the Java Control Panel Security tab, and it all came good. The IE option in the Java Control Panel Advanced tab is now checked and staying checked. The Mozilla one still isn't staying checked, but it was always like that before, and it works in Firefox anyway even without it checked. What the problem actually was I have no idea, but I guess something just needed resetting. It's working fine in IE8 now! Thanks everyone. Cheers, Dave.

I can understand why it's not working on https sites, you have worked around that by adding the HTTPSProxy. What I don't understand is why it's not now working on http Java test sites either, which I'm sure it used to on at least some of them. Also why the setting in the Java Control Panel isn't "sticking". IIRC the "Mozilla Family" one never did stick, although Java still worked in Firefox and Opera, but the IE one certainly did.

Something is strange here. My understanding is that you can't test Java in IE8 on any https sites as most don't now work in IE8 anyway, and that's been the case for quite some time. However I now can't find any Java test pages that work, which I'm sure I did some months ago when I last tried. I was assuming that was because of the latest versions of Java which had lost compatibility with IE8. The sites that I can load either say that Java isn't installed/enabled or just produce white boxes with red crosses in the top left corner where the applets should be. The add-ons are present and enabled in IE8, but the Java Control Panel shows both Microsoft Internet Explorer and Mozilla family unchecked, and if I check them they've reverted to unchecked when I look again. Strange, as Java is working fine in Firefox! Obviously this is not really a problem, but I don't like things not working when I don't know why! Anything else I can check? It is a manual install of Java 8 Update 162, and everything else about the installation seems to be fine.

Java hasn't actually worked in IE8 for a very long time indeed in my experience. Firefox 52ESR is the only browser I have where the plugin still does work on any of the test sites.

I queried that as well here. The links in that thread have now been fixed. You asked whether you need to have Java, and the answer now is probably actually no. Java-based programs need it to run of course, but they often include their own bundled version anyway. There are still websites that use it for things like animations, as an alternative to Flash, but they are getting very few and far between now.

Thanks, that's fine now. I did wonder about replacing javacpl.cpl with the newer version in \system32. Does that matter?

@sdfox7 Your link doesn't work as it stands, as it bypasses the license acceptance procedure. You have to go here first to get the file as far as I can see - http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html

I assume you meant "FF ESR 52.6.0" not "FF ESR 56.6.0" Den. I only ask because you said 56.6.0 in a previous post too!

Known problem I'm afraid. See here, and here, and the subsequent posts. It has been reported to Oracle, but whether they will do anything to fix it as they don't officially support XP any more, I don't know.

Indeed so!

Gosh, and I thought I had complex systems! It will be a sad day when Firefox 52ESR has to be abandoned, because it still supports so many legacy things.

Why are you using it on Windows 7 rather than a later version as a matter of interest Den? I'm using Firefox 56 on Windows 8.1 and Windows 10. I won't go any higher as I would lose too many of the extensions I like. Is it because you use NPAPI plug-ins?