FranceBB Posted September 2, 2018 Share Posted September 2, 2018 @heinoganda I've been using ProxHTTPS for a few days and it works as expected, however I'm having issues with Mega as it says NET::ERR_CERT_COMMON_NAME_INVALID It's almost like if Mega actually knows that ProxHTTPS has changed the certificate information and refuses the connection thus preventing data leaks. Any idea? Oh, by the way, it would be interesting to add a TLS1.3 to TLS1.2 feature in the future (if Microsoft doesn't deliver TLS1.3 as promised). Link to comment Share on other sites More sharing options...
heinoganda Posted September 2, 2018 Author Share Posted September 2, 2018 (edited) @FranceBB I just tested Mega and could not detect this error (tested with Google Chrome 49.0.2623.112). Have changes been made to the "config.ini" file? Are your Windows XP Root Certificates up-to-date? Is the entry in the file "config.ini" present under [SSL Pass-Thru] *.mega.co.nz? Quit HTTPS Proxy, delete the contents of the "Certs" folder, and then restart. Maybe you give me the link via PM, where I can check where the error lies. Unfortunately, there is no news for Python when it comes to supporting TLS 1.3. Edited September 2, 2018 by heinoganda Link to comment Share on other sites More sharing options...
FranceBB Posted September 2, 2018 Share Posted September 2, 2018 (edited) I changed from "*.mega.co.nz" to "*mega.co.nz" in [SSL Pass-Thru] and it works. Apparently, the ".co.nz" domain is just a redirect to the ".nz" domain, which is now the main one. Removing the dot from the [SSL Pass-Thru] made it load correctly As to the certificates, of course I have them updated, I use your certificate updater on a regular basis Quote Unfortunately, there is no news for Python when it comes to supporting TLS 1.3. Too bad. Maybe there will. Who knows. Time will tell. Still, I'm optimistic. ^_^ Edited September 2, 2018 by FranceBB Link to comment Share on other sites More sharing options...
Dave-H Posted September 4, 2018 Share Posted September 4, 2018 Well I deleted all the files in the certificate cache folders, and cleaned the registry of all the system certificate entries. There were then no certificates recorded as being installed on the machine at all. On reboot a new lot were downloaded, with no error messages, and I then ran the Certificate Updater to get the rest of them restored. So far, so good, I guess I won't know until the next automatic update whether this has finally laid this problem to rest. From past experience, I'm not holding out a lot of hope! Link to comment Share on other sites More sharing options...
heinoganda Posted September 7, 2018 Author Share Posted September 7, 2018 (edited) Update for root certificates: New: CN = emSign ECC Root CA - C3 O = eMudhra Inc OU = emSign PKI C = US CN = emSign ECC Root CA - G3 O = eMudhra Technologies Limited OU = emSign PKI C = IN CN = emSign Root CA - C1 O = eMudhra Inc OU = emSign PKI C = US CN = emSign Root CA - C2 O = eMudhra Inc OU = emSign PKI C = US CN = emSign Root CA - G1 O = eMudhra Technologies Limited OU = emSign PKI C = IN CN = emSign Root CA - G2 O = eMudhra Technologies Limited OU = emSign PKI C = IN Added again: CN = Entrust Root Certification Authority - G4 OU = (c) 2015 Entrust, Inc. - for authorized use only OU = See www.entrust.net/legal-terms O = Entrust, Inc. C = US Those using heinoganda's Cert_Updater.exe should run it ASAP. Others needing a redistributable rootsupd.exe should follow his instructions for creating their own, or PM at 5eraph for an updated EXE file. Edited November 11, 2018 by heinoganda 1 Link to comment Share on other sites More sharing options...
FranceBB Posted September 12, 2018 Share Posted September 12, 2018 (edited) Just to report that if you are using proxHTTPS and Whatsapp, you should add *web.whatsapp.com* to [SSL Pass-Thru] otherwise it's not gonna let you login for whatever reason. ^_^ Cheers. Edited September 12, 2018 by FranceBB Link to comment Share on other sites More sharing options...
heinoganda Posted September 13, 2018 Author Share Posted September 13, 2018 (edited) @FranceBB Thanks for the info, will complement the entry in the config.ini for future updates on HTTPS proxy. This information helps to improve the functionality for all users of HTTPS Proxy. Annotation: Alone I can not test all websites / programs in this world for the function with HTTPS proxy. Edited September 13, 2018 by heinoganda 1 Link to comment Share on other sites More sharing options...
Dave-H Posted September 15, 2018 Share Posted September 15, 2018 (edited) Well my purging of the certificates on my machine didn't work. In fact I'm now getting so many errors on every boot that they're being suppressed to avoid swamping the log! I'm still really surprised that no-one else seems to be having this problem, as it's happening exactly the same on my netbook too, which has never had any changes made to its certificate system, it hasn't even had any manual updates applied using @heinoganda's updater or by any other means! Edited September 15, 2018 by Dave-H Addition Link to comment Share on other sites More sharing options...
heinoganda Posted September 15, 2018 Author Share Posted September 15, 2018 @Dave-H Maybe it's the outdated Eudora or other software. In any case, "something" where this obsolete certificate requires that is no longer available. Link to comment Share on other sites More sharing options...
Dave-H Posted September 15, 2018 Share Posted September 15, 2018 A good thought, but I don't have Eudora installed on my netbook, so it can't be that! Link to comment Share on other sites More sharing options...
Tangy Posted September 15, 2018 Share Posted September 15, 2018 (edited) Since you mentioned it, I've started getting said errors on September 13. Never had any changes made to certificate system. Edited September 15, 2018 by Tangy Additional info Link to comment Share on other sites More sharing options...
glnz Posted September 15, 2018 Share Posted September 15, 2018 Dave-H - you are not alone!!! My XP Applications Event Viewer page looks exactly like yours, ending with the same Warning. And I run Heinoganda's cert_updater every few months, which splits the timeline into alternate universes. However, I have not tried any of the other suggestions in this thread. Link to comment Share on other sites More sharing options...
Dave-H Posted September 15, 2018 Share Posted September 15, 2018 Good, well that's three of us at least with the same issue! I'm sure he will correct me if I'm wrong, but I don't think running or not running Heinoganda's certificate updater has anything to do with these errors, as I think that updates something different to what the crypt32 updates are. As those crypt32 automatic updates are still happening, and were for ages after XP EOL before the errors started, they must be something different to what the certificate updater is designed to update, which is presumably something now no longer updated automatically by the OS. As I said, I've never run the certificate updater on my netbook, or done any other manual updates or alterations to any of the certificates system on that machine, and the errors have started there too, although they did take a lot longer to start appearing there than they did on my main machine for some reason. Link to comment Share on other sites More sharing options...
bluebolt Posted September 15, 2018 Share Posted September 15, 2018 I have had these errors as well, though never to the extent as Dave-H, and not at boot. They come--and then go away--over time. I will try to keep closer tabs on my Event Viewer, to see if I can determine what I'm doing when they happen. Link to comment Share on other sites More sharing options...
SRainharp Posted September 15, 2018 Share Posted September 15, 2018 (edited) Fresh install of XP, IE gives a ton of errors everywhere. Seems most if not all certs are invalid, I'm going to try this. Maxthon gives the same or similar issues, which uses Windows crypt dlls. Edited September 15, 2018 by SRainharp Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now