heinoganda Posted February 15, 2019 Share Posted February 15, 2019 (edited) 1 hour ago, i430VX said: Well I tried this because I was bored, still hung in the same place. Anyway, I guess it's just broken, waiting for the new HDD now to reinstall onto With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work. Edited February 15, 2019 by heinoganda Link to comment Share on other sites More sharing options...
i430VX Posted February 15, 2019 Share Posted February 15, 2019 1 hour ago, heinoganda said: With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work. Yeah. Thanks very much for your suggestions, though! Link to comment Share on other sites More sharing options...
luweitest Posted February 15, 2019 Share Posted February 15, 2019 14 hours ago, someguy25 said: well maybe the error means this? http://prntscr.com/ml1wsu Thanks for the info, so unchecking certificate revocation is the solution to error 0x80072F8A. I repeated test and found that only unticking "checking server certificate revocation" (not verbatim since my version is chinese) is needed. Tick it and 0x80072F8A error will occur. Have MS really revoked the certificate of www.update.microsoft.com? Link to comment Share on other sites More sharing options...
capmo Posted February 15, 2019 Share Posted February 15, 2019 On 2/7/2019 at 10:22 PM, mixit said: https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?do=findComment&comment=1148337 Just look in the Brazilian folder instead of Portuguese. (Incidentally, this post was the very next one after the one you quoted ) On 2/9/2019 at 6:43 PM, wyxchari said: Search here PTB: https://ryanvm.net/forum/viewtopic.php?t=10445 You guys are amazing! I was able to locate the PTB update inside the repository. Thank you both so much. 1 Link to comment Share on other sites More sharing options...
Thomas S. Posted February 15, 2019 Share Posted February 15, 2019 (edited) Quote 10 hours ago, heinoganda said: Do you also receive the error message 0x80072F8A in IE8 at WU/MU? Sorry for delayed answer YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de) NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de) In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error). If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS. Using the HTTPSProxy or not makes no difference. I have tried the httpS link in Firefox, and it give me the same warning, don't connect. Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID... May be a intermediate certificate is missing in FF cert store, but this is only a suggestion. To much to research. At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4461614 / kb4462174, without these update I can't run Office too!!!!! Must be a second problem... Certificate: MS_Update.cer Edited February 15, 2019 by Thomas S. Link to comment Share on other sites More sharing options...
roytam1 Posted February 15, 2019 Share Posted February 15, 2019 47 minutes ago, Thomas S. said: Sorry for delayed answer YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de) NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de) In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error). If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS. Using the HTTPSProxy or not makes no difference. I have tried the httpS link in Firefox, and it give me the same warning, don't connect. Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID... May be a intermediate certificate is missing in FF cert store, but this is only a suggestion. To much to research. At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4462174, without this update I can't run Office too!!!!! Must be a second problem... Certificate: MS_Update.cer if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem. Link to comment Share on other sites More sharing options...
Thomas S. Posted February 15, 2019 Share Posted February 15, 2019 1 hour ago, roytam1 said: if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem. NO! Already done and work well. Makes no difference in this case. Link to comment Share on other sites More sharing options...
heinoganda Posted February 15, 2019 Share Posted February 15, 2019 (edited) On 2/14/2019 at 9:08 AM, heinoganda said: Possible problem solving: Under Control Panel, go to Internet Options > Advanced, scroll to Security for the different encryption types SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2. Make a tick in an unused encryption mode like SSL 3.0 and take over, then remove the tick again with encryption type SSL 3.0 and take over again. For encryption type, TLS 1.0 to TLS 1.2 should still be activated. Perhaps this solution to the problem of translation is too inaccurate, so here is an illustrated sequence of the procedure. Update: The procedure adds the following keys in the registry. Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ShowPunycode"=dword:00000000 "EnablePunycode"=dword:00000001 "DisableIDNPrompt"=dword:00000000 "CertificateRevocation"=dword:00000000 "WarnOnPostRedirect"=dword:00000001 "WarnonBadCertRecving"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto] "UTF8Encoding"=dword:00000000 @Thomas S. I am happy for you that WU/MU in IE8 works for you again. Edited February 16, 2019 by heinoganda Link to comment Share on other sites More sharing options...
luweitest Posted February 15, 2019 Share Posted February 15, 2019 I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect. I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work. IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)? Link to comment Share on other sites More sharing options...
glnz Posted February 15, 2019 Author Share Posted February 15, 2019 heinoganda - your steps with SSL 3.0 on and off just worked for me. But that's NUTTY, man! Link to comment Share on other sites More sharing options...
Thomas S. Posted February 15, 2019 Share Posted February 15, 2019 5 hours ago, heinoganda said: @Thomas S. I am happy for you that WU/MU in IE8 works for you again. Thanks! At last I have solved all problems, don't know right what the problem with Office 2010 was. May be that one update was not installed OK. All is set as here discussed and works well. 1 hour ago, luweitest said: I found another explorer bug that may be brought by an update after PosReady hack... Works here OK. Link to comment Share on other sites More sharing options...
Mathwiz Posted February 15, 2019 Share Posted February 15, 2019 2 hours ago, luweitest said: I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect. I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work. IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)? That was broken by a buggy update back in 2014: Quote BUG REPORT: KB2926765 update prevents Internet and E-mail client selection from the Start menu. After applying the specific update to a POSReady 2009 system, Start menu will always show the HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet Internet Client even if HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet is not empty. The same bug is observed with the E-mail client. As a result, the end-user cannot change the Start menu Internet and E-mail icons from the Start Menu. Link: https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?page=15&tab=comments#comment-1085089 Link to comment Share on other sites More sharing options...
XPPOS2009 Posted February 15, 2019 Share Posted February 15, 2019 (edited) KB4487085 has been re-released (V2): http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe Also available via AU/WU/MU (clears it if previously hidden as per usual) Package files are correctly platformed and versioned now - tested fine Edited February 15, 2019 by XPPOS2009 more info 1 Link to comment Share on other sites More sharing options...
SD73 Posted February 15, 2019 Share Posted February 15, 2019 1 hour ago, XPPOS2009 said: KB4487085 has been re-released (V2): http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe Also available via AU/WU/MU (clears it if previously hidden as per usual) Package files are correctly platformed and versioned now - tested fine How about that? It worked! Link to comment Share on other sites More sharing options...
Dave-H Posted February 16, 2019 Share Posted February 16, 2019 Hallelujah! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now