Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


glnz

POSReady 2009 updates ported to Windows XP SP3 ENU

Recommended Posts

1 hour ago, i430VX said:

Well I tried this because I was bored, still hung in the same place. Anyway, I guess it's just broken, waiting for the new HDD now to reinstall onto

With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work.

:)

Edited by heinoganda

Share this post


Link to post
Share on other sites

1 hour ago, heinoganda said:

With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work.

:)

Yeah. Thanks very much for your suggestions, though!

:)

Share this post


Link to post
Share on other sites
14 hours ago, someguy25 said:

well maybe the error means this?

http://prntscr.com/ml1wsu

Thanks for the info, so unchecking certificate revocation is the solution to error 0x80072F8A. I repeated test and found that only unticking "checking server certificate revocation" (not verbatim since my version is chinese) is needed. Tick it and 0x80072F8A error will occur.

Have MS really revoked the certificate of www.update.microsoft.com?

Share this post


Link to post
Share on other sites
On 2/7/2019 at 10:22 PM, mixit said:

https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?do=findComment&comment=1148337

Just look in the Brazilian folder instead of Portuguese. (Incidentally, this post was the very next one after the one you quoted :sneaky:)

 

On 2/9/2019 at 6:43 PM, wyxchari said:

You guys are amazing! I was able to locate the PTB update inside the repository. Thank you both so much. :)

Share this post


Link to post
Share on other sites
Quote

10 hours ago, heinoganda said:

Do you also receive the error message 0x80072F8A in IE8 at WU/MU?

Sorry for delayed answer :worship:

YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error).

If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS.

Using the HTTPSProxy or not makes no difference.

I have tried the httpS link in Firefox, and it give me the same warning, don't connect.

Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com

I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID...

May be a intermediate certificate is missing in FF cert store, but this is only a suggestion.

To much to research.

 At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4461614 / kb4462174, without these update I can't run Office too!!!!!

Must be a second problem...

Certificate:

MS_Update.cer

 

 

 

Edited by Thomas S.

Share this post


Link to post
Share on other sites
47 minutes ago, Thomas S. said:

Sorry for delayed answer :worship:

YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error).

If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS.

Using the HTTPSProxy or not makes no difference.

I have tried the httpS link in Firefox, and it give me the same warning, don't connect.

Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com

I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID...

May be a intermediate certificate is missing in FF cert store, but this is only a suggestion.

To much to research.

 At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4462174, without this update I can't run Office too!!!!!

Must be a second problem...

Certificate:

MS_Update.cer

 

 

 

if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem.

Share this post


Link to post
Share on other sites
1 hour ago, roytam1 said:

if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem.

NO! Already done and work well. Makes no difference in this case.

Share this post


Link to post
Share on other sites
On 2/14/2019 at 9:08 AM, heinoganda said:

Possible problem solving:

Under Control Panel, go to Internet Options > Advanced, scroll to Security for the different encryption types SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2. Make a tick in an unused encryption mode like SSL 3.0 and take over, then remove the tick again with encryption type SSL 3.0 and take over again. For encryption type, TLS 1.0 to TLS 1.2 should still be activated. 

Perhaps this solution to the problem of translation is too inaccurate, so here is an illustrated sequence of the procedure.

 

Error-WUMU1.jpg

Error-WUMU2.jpg

Error-WUMU3.jpg

Error-WUMU4.jpg

Error-WUMU5.jpg

Error-WUMU6.jpg

Error-WUMU7.jpg

Error-WUMU8.jpg

Error-WUMU9.jpg


Update:

The procedure adds the following keys in the registry.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ShowPunycode"=dword:00000000
"EnablePunycode"=dword:00000001
"DisableIDNPrompt"=dword:00000000
"CertificateRevocation"=dword:00000000
"WarnOnPostRedirect"=dword:00000001
"WarnonBadCertRecving"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto]
"UTF8Encoding"=dword:00000000

 

 

@Thomas S.

I am happy for you that WU/MU in IE8 works for you again.

 

:)

Edited by heinoganda

Share this post


Link to post
Share on other sites

I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect.

I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work.

IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)?

Share this post


Link to post
Share on other sites

heinoganda - your steps with SSL 3.0 on and off just worked for me.

But that's NUTTY, man!

Share this post


Link to post
Share on other sites
5 hours ago, heinoganda said:

@Thomas S.

I am happy for you that WU/MU in IE8 works for you again.

Thanks! :)

At last I have solved all problems, don't know right what the problem with Office 2010 was.

May be that one update was not installed OK. All is set as here discussed and works well.

 

1 hour ago, luweitest said:

I found another explorer bug that may be brought by an update after PosReady hack...

Works here OK.

 

 

Share this post


Link to post
Share on other sites
2 hours ago, luweitest said:

I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect.

I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work.

IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)?

That was broken by a buggy update back in 2014:

Quote

 

BUG REPORT: KB2926765 update prevents Internet and E-mail client selection from the Start menu.

 

After applying the specific update to a POSReady 2009 system, Start menu will always show the HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet Internet Client even if HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet is not empty.

 

The same bug is observed with the E-mail client.

As a result, the end-user cannot change the Start menu Internet and E-mail icons from the Start Menu.

 

Link: https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?page=15&tab=comments#comment-1085089

Share this post


Link to post
Share on other sites

KB4487085 has been re-released (V2):

http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe

Also available via AU/WU/MU (clears it if previously hidden as per usual)

Package files are correctly platformed and versioned now - tested fine

Edited by XPPOS2009
more info
  • Like 1

Share this post


Link to post
Share on other sites
1 hour ago, XPPOS2009 said:

KB4487085 has been re-released (V2):

http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe

Also available via AU/WU/MU (clears it if previously hidden as per usual)

Package files are correctly platformed and versioned now - tested fine

How about that?  It worked!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   1 member

×