Root Certificates and Revoked Certificates for Windows XP

[Dixel]

2 hours ago, Ben Markson said:

I do have a copy of rootsupd.exe

Thank you , no need , I have it.

[Dave-H]

I'm getting the same "access denied" on that URL too if I enter it in my browser.
The URLs in the registry entry for the updater seem to redirect to that, and yet the updater works for me!


 

[Dixel]

People , someone knows how to force this tool to use proxy settings ? It simply ignores LAN settings if I set up a proxy.

I suspect MS doesn't like my real IP , just as it was for some French folks in 360 topic. Otherwise, I'm constantly getting this error.

Oh , and DAVE , it doesn't create any registry entries you mentioned . I tried adding them , the result is the same.

[Dave-H]

That's interesting, perhaps only earlier versions of the updater used that registry entry.
I'm afraid only @heinogandacan answer that question, and they don't seem to be around here any more.

I do use ProxHTTPSProxy, but I'm not sure that's relevant as it's set to work only with https connections.

[Humming Owl]

@Dixel

Try using Wget directly to download the files with the links provided by @Ben Markson

6 hours ago, Ben Markson said:

 Download the latest .sst files (from http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/):
 · disallowedcert.sst
 · authroots.sst
 · delroots.sst
 · roots.sst
 · updroots.sst

You can set Wget to use proxy settings:

https://stackoverflow.com/questions/11211705/how-to-set-proxy-for-wget#11211812

https://superuser.com/questions/526710/how-to-set-http-proxy-address-for-wget-under-windows#526779

Try something in the CMD like --> "wget use_proxy=yes http_proxy=127.0.0.1:8080 http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authroots.sst"

Maybe that could help.

Cheers.

[Dixel]

Everyone , thank you for the help ! I was able to update through the manual method , but not with this tool . Even though I've managed to configure the proxy usage for it , the requests were just blocked ! The only way to obtain them was through a well known download manager programme with a UK IP.  And @Dave-H , of course that's not for me to decide , but perhaps you need to edit the post and remove weird text like the word "loud" , I'm not sure what he meant by that. I think it could be shorter , overall , like straight to the point . Too many sentences at the top. And the most important part , please add that the roots update needs to be run as admin , otherwise it won't work on Vista . 

".. entry in the string VERSION should be (missed be) "5,0,2195,0" loud (what is loud?) and in VER "005.."

Perhaps relace should with must. And this :

"...no correct solution for the update of the Roots certificates and revoked certificates found" , but it is found already . Misleading , outdated info.

[Dave-H]

As I'm sure you realise, English is not @heinoganda's first language, and many of their posts are therefore a bit strangely worded and need a bit of interpretation!
I will add the note about Vista, but of course the tool was originally only intended for use on XP, where admin rights are not an issue.
I've also reworded the section you mention to make it clearer (I don't know what "loud" was supposed to be either!)
I hope what it says is now correct!

[mina7601]

Hi. This certificate updater is the easiest way to update certificates IMO (instead of having to download rootsupdyyyymm.exe, where y means year, and m means month). I knew about this tool recently, and ran it on my XP SP3 VM and wasn't nagged about the certificates anymore.

What's more interesting is that, this tool also runs on Windows 2000 with extended kernel, and it also updated the certificates successfully.  Here's a screenshot of it running on my 2000 SP4 VM:

[egrabrych]

Another change has come.

The contents of the updroots.sst file have been changed; the contents of the other * .sst files are unchanged.

Edited November 2, 2021 by egrabrych

[Dave-H]

Thanks!

[MilkChan]

Today I tried updating the root certificate. Who thinks there's changed content? It is dated 2021-10-19.

Edited December 4, 2021 by tpao12

[jiafei2427]

Thank you. It's very easy to use! 

Edited February 23, 2022 by jiafei2427

[mina7601]

[Dave-H]

Thanks for the heads up!

[DrWho3000]

what is the kb hotfix fir this for XP SP3

sure i see it somewhere browsing

how well does this work on xp

what do i have to do