POSReady 2009 updates ported to Windows XP SP3 ENU

[heinoganda]

1 hour ago, i430VX said:

Well I tried this because I was bored, still hung in the same place. Anyway, I guess it's just broken, waiting for the new HDD now to reinstall onto

With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work.

Edited February 15, 2019 by heinoganda

[i430VX]

1 hour ago, heinoganda said:

With you, it has unfortunately led to serious problems because of KB4487085, I'm sorry that it did not work.

Yeah. Thanks very much for your suggestions, though!

[luweitest]

14 hours ago, someguy25 said:

well maybe the error means this?

http://prntscr.com/ml1wsu

Thanks for the info, so unchecking certificate revocation is the solution to error 0x80072F8A. I repeated test and found that only unticking "checking server certificate revocation" (not verbatim since my version is chinese) is needed. Tick it and 0x80072F8A error will occur.

Have MS really revoked the certificate of www.update.microsoft.com?

[capmo]

On 2/7/2019 at 10:22 PM, mixit said:

https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?do=findComment&comment=1148337

Just look in the Brazilian folder instead of Portuguese. (Incidentally, this post was the very next one after the one you quoted )

 

On 2/9/2019 at 6:43 PM, wyxchari said:

Search here PTB: https://ryanvm.net/forum/viewtopic.php?t=10445

You guys are amazing! I was able to locate the PTB update inside the repository. Thank you both so much.

[Thomas S.]

Quote

10 hours ago, heinoganda said:

Do you also receive the error message 0x80072F8A in IE8 at WU/MU?

Sorry for delayed answer

YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error).

If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS.

Using the HTTPSProxy or not makes no difference.

I have tried the httpS link in Firefox, and it give me the same warning, don't connect.

Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com

I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID...

May be a intermediate certificate is missing in FF cert store, but this is only a suggestion.

To much to research.

 At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4461614 / kb4462174, without these update I can't run Office too!!!!!

Must be a second problem...

Certificate:

MS_Update.cer

 

 

 

Edited February 15, 2019 by Thomas S.

[roytam1]

47 minutes ago, Thomas S. said:

Sorry for delayed answer

YES, if I use http (http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

NO if same link as httpS (https://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de)

In the last case I get a stop "Es besteht ein Problem mit dem Sicherheitszertifikat der Website" (certifikate error).

If I disable the internet security option "Auf gesperrte Serverzertifikate prüfen" (Check on locked server certificates) it works immediatly without error, NO restart of IE8 needed, only reload the site. HTTP as good as HTTPS.

Using the HTTPSProxy or not makes no difference.

I have tried the httpS link in Firefox, and it give me the same warning, don't connect.

Then I look at certificate locked in FF, copied the certificate and prooved it as "MS_Update.cer" into windows direct. IT IS VALID and points to www.update.microsoft.com

I think that there is indeed a malconfiguration on server side. If the certificate is valid, why locked FF the link? The certificate is VALID...

May be a intermediate certificate is missing in FF cert store, but this is only a suggestion.

To much to research.

 At this point I am not going through the whole update, there is another problem with Office 2010 behind kb4462174, without this update I can't run Office too!!!!!

Must be a second problem...

Certificate:

MS_Update.cer

 

 

 

if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem.

[Thomas S.]

1 hour ago, roytam1 said:

if you enable TLS 1.2 in Internet Settings, you can go directly to https windows update site without problem.

NO! Already done and work well. Makes no difference in this case.

[heinoganda]

On 2/14/2019 at 9:08 AM, heinoganda said:

Possible problem solving:

Under Control Panel, go to Internet Options > Advanced, scroll to Security for the different encryption types SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2. Make a tick in an unused encryption mode like SSL 3.0 and take over, then remove the tick again with encryption type SSL 3.0 and take over again. For encryption type, TLS 1.0 to TLS 1.2 should still be activated. 

Perhaps this solution to the problem of translation is too inaccurate, so here is an illustrated sequence of the procedure.

 

Update:

The procedure adds the following keys in the registry.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ShowPunycode"=dword:00000000
"EnablePunycode"=dword:00000001
"DisableIDNPrompt"=dword:00000000
"CertificateRevocation"=dword:00000000
"WarnOnPostRedirect"=dword:00000001
"WarnonBadCertRecving"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto]
"UTF8Encoding"=dword:00000000

 

 

@Thomas S.

I am happy for you that WU/MU in IE8 works for you again.

 

Edited February 16, 2019 by heinoganda

[luweitest]

I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect.

I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work.

IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)?

[glnz]

heinoganda - your steps with SSL 3.0 on and off just worked for me.

But that's NUTTY, man!

[Thomas S.]

5 hours ago, heinoganda said:

@Thomas S.

I am happy for you that WU/MU in IE8 works for you again.

Thanks!

At last I have solved all problems, don't know right what the problem with Office 2010 was.

May be that one update was not installed OK. All is set as here discussed and works well.

 

1 hour ago, luweitest said:

I found another explorer bug that may be brought by an update after PosReady hack...

Works here OK.

 

 

[Mathwiz]

2 hours ago, luweitest said:

I found another explorer bug that may be brought by an update after PosReady hack: The internet program of start menu could not be modified by normal routine: right click start →property→custom start menu→general tab, selecting "internet" program does no effect.

I used procmon and found that explorer modifies HKCU\Software\Clients\StartMenuInternet\(Default), not HKLM\SOFTWARE\Clients\StartMenuInternet\(Default), which if modified manually, could work.

IIRC it used to work. Did anyone know whether this bug is introduced by some update? Or it has been discussed (I don't intend to review all 180 pages before)?

That was broken by a buggy update back in 2014:

Quote

 

BUG REPORT: KB2926765 update prevents Internet and E-mail client selection from the Start menu.

 

After applying the specific update to a POSReady 2009 system, Start menu will always show the HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet Internet Client even if HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet is not empty.

 

The same bug is observed with the E-mail client.

As a result, the end-user cannot change the Start menu Internet and E-mail icons from the Start Menu.

 

Link: https://msfn.org/board/topic/171814-posready-2009-updates-ported-to-windows-xp-sp3-enu/?page=15&tab=comments#comment-1085089

[XPPOS2009]

KB4487085 has been re-released (V2):

http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe

Also available via AU/WU/MU (clears it if previously hidden as per usual)

Package files are correctly platformed and versioned now - tested fine

Edited February 15, 2019 by XPPOS2009
more info

[SD73]

1 hour ago, XPPOS2009 said:

KB4487085 has been re-released (V2):

http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/02/windowsxp-kb4487085-v2-x86-embedded-enu_667f051ffe98ff99495e9b6ede2b8c321aba1ca3.exe

Also available via AU/WU/MU (clears it if previously hidden as per usual)

Package files are correctly platformed and versioned now - tested fine

How about that?  It worked!

[Dave-H]

Hallelujah!