Jump to content

Root Certificates and Revoked Certificates for Windows XP


heinoganda

Recommended Posts


On 9/29/2018 at 1:34 AM, heinoganda said:

@Dave-H

An error is still at the beginning and end to see again in the HTTPS proxy console, open the config.ini file in the HTTPS proxy directory, add the following entrie under [SSL pass-thru] and start HTTPS proxy again as usual.


*push.opera.com*

The next coming update of HTTPS Proxy will apply these entries. If you have such yellow error messages on certain web pages you can communicate them via PM. Otherwise, only Windows system log remains to see if this error still occurs.

:)

Sorry for the delay in responding, but yes, that additional entry fixed all the error messages!
:thumbup

Link to comment
Share on other sites

CertUpd.jpg

Update for root certificates:

New:

CN = Fina Root CA
O = Financijska agencija
C = HR

CN = Hongkong Post Root CA 2
O = Hongkong Post
L = Hong Kong
S = Hong Kong
C = HK

CN = Hongkong Post Root CA 3
O = Hongkong Post
L = Hong Kong
S = Hong Kong
C = HK


URL update for Cert_Updater (insert the following code into a new text file, rename file extension txt to reg and execute it to update these entries in the registry or enter the changed URLs manually in the registry):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Cert_Updater]
"SST_Download_URL"="http://wsus.ds.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en"
"SST_Download_URL_D1"="http://ds.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en"


Those using heinoganda's Cert_Updater.exe should run it ASAP. Others needing a redistributable rootsupd.exe should follow his instructions for creating their own, or PM at 5eraph for an updated EXE file.

:)

Edited by heinoganda
Link to comment
Share on other sites

Thanks!
Unfortunately, when I ran version 1.6, it was immediately blocked by my internet security program.
It didn't actually delete the file, but it stopped it running.
I've had to add it to the exceptions list.
This has not happened with any previous version.
Sadly the internet security program doesn't seem to have logged its action, so I can't see what it thought the problem was!
:(

Edited by Dave-H
Addition
Link to comment
Share on other sites

@Dave-H

That may be because I have implemented a Webspider function, where only on the sst file of comparison URLs accesses and if new is downloaded first. This function can also be disabled in the registry under "HKEY_LOCAL_MACHINE\SOFTWARE\Cert_Updater" for the entry "webspider_to_compare" (Default 1, Off 0).
Here is a scan of Virustotal

:)

Link to comment
Share on other sites

Heinoganda - thanks again, from me and all five of my doppelgangers.

Your Info Version 1.6.txt says

"For this the image (CertUpd.jpg) of the screen print must be loaded into the same directory of Cert_Updater, or in the same directory of Cert_Updater a text file with the name "Cert_Updater.txt" where the corresponding link to the image of the screen printout is inserted."

But I installed your .reg file and I have just run Cert_Updater_v1.6,  Do I also need to follow your instructions above about CertUpd.jpg?

Link to comment
Share on other sites

2 hours ago, heinoganda said:

No, you do not have to. Do you see the picture of this post?

:)

Could not import values to registry. Basically it says that was due to system error or defected HD. However I run certupdater 1.6 and informed me that update was successful. 

Cheers

image1.JPG

Edited by Tangy
File system error/ error HD
Link to comment
Share on other sites

4 hours ago, heinoganda said:

@Dave-H

That may be because I have implemented a Webspider function, where only on the sst file of comparison URLs accesses and if new is downloaded first. This function can also be disabled in the registry under "HKEY_LOCAL_MACHINE\SOFTWARE\Cert_Updater" for the entry "webspider_to_compare" (Default 1, Off 0).
Here is a scan of Virustotal

:)

Thanks @heinoganda, I'll probably just leave the program in the internet security program's exceptions list rather than switch off any of its functions.
It seems to be fine like that.
Cheers and thanks again, Dave.
:)

Link to comment
Share on other sites

@Tangy

Use Regedit to delete the Cert_Updater entry (under HKEY_LOCAL_MACHINE\SOFTWARE delete Cert_Updater) and then execute Cert_updater 1.6 again. The default values are then re-entered in the registry including the change of the download URL's.

:)

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...