Osan Posted October 15, 2020 Share Posted October 15, 2020 (edited) https://imgur.com/a/k0m2jCx I just let the program pass the firewall without any filter Edited October 15, 2020 by Osan Link to comment Share on other sites More sharing options...
egrabrych Posted October 30, 2020 Share Posted October 30, 2020 Only the updroots.sst file has the changed content, the other files have not changed. 1 Link to comment Share on other sites More sharing options...
FranceBB Posted October 31, 2020 Share Posted October 31, 2020 Ok. Updated once again. Link to comment Share on other sites More sharing options...
Sampei.Nihira Posted November 10, 2020 Share Posted November 10, 2020 (edited) Will it also affect our Windows XP OS? I also wonder if chrome-based browsers will have any problems? https://www.neowin.net/news/lets-encrypt-certificate-switch-to-cause-problems-in-2021 Edited November 10, 2020 by Sampei.Nihira Link to comment Share on other sites More sharing options...
UCyborg Posted November 10, 2020 Share Posted November 10, 2020 It won't. You already have ISRG Root X1 certificate if you keep certificates up-to-date with the updater here. Firefox based browsers are the special case that use their own certificate store. 1 Link to comment Share on other sites More sharing options...
Sampei.Nihira Posted November 10, 2020 Share Posted November 10, 2020 37 minutes ago, UCyborg said: It won't. You already have ISRG Root X1 certificate if you keep certificates up-to-date with the updater here. Firefox based browsers are the special case that use their own certificate store. I have checked now. The certificate is present: TH. Link to comment Share on other sites More sharing options...
UCyborg Posted November 11, 2020 Share Posted November 11, 2020 I noticed my XP x64 doesn't handle certain certificates, eg.: Symantec Class 1 Public Primary Certification Authority - G4 - This certificate has an nonvalid digital signature. I just installed an update KB3072630, which installs supposedly the latest crypt32.dll version 5.131.3790.5668, but the issue remains. Does the certificate use unsupported signature algorithm and this is just how it is on XP or is there a solution? Link to comment Share on other sites More sharing options...
Dave-H Posted November 14, 2020 Share Posted November 14, 2020 My version of crypt32.dll is 5.131.2600.6459, which seems rather older than yours, although my system is 32 bit. I looked at KB3072630, but that seems to be an update for the Windows Installer files, it doesn't contain crypt32.dll. Is that correct? Link to comment Share on other sites More sharing options...
UCyborg Posted November 15, 2020 Share Posted November 15, 2020 It does contain crypt32.dll, you can peek inside the installer with 7-Zip. http://download.windowsupdate.com/d/msdownload/update/software/secu/2015/06/windowsserver2003-kb3072630-x64-enu_e4e5d7c372ddb9474fba3947d45a62cad7051a35.exe Link to comment Share on other sites More sharing options...
Vistapocalypse Posted November 15, 2020 Share Posted November 15, 2020 On 11/11/2020 at 3:59 PM, UCyborg said: I noticed my XP x64 doesn't handle certain certificates, eg.: Symantec Class 1 Public Primary Certification Authority - G4 - This certificate has an nonvalid digital signature. My guess is that those certificates have sha2 digital signatures only. Link to comment Share on other sites More sharing options...
Dave-H Posted November 15, 2020 Share Posted November 15, 2020 1 hour ago, UCyborg said: It does contain crypt32.dll, you can peek inside the installer with 7-Zip. http://download.windowsupdate.com/d/msdownload/update/software/secu/2015/06/windowsserver2003-kb3072630-x64-enu_e4e5d7c372ddb9474fba3947d45a62cad7051a35.exe OK, yes that version does contain crypt32.dll, as you say. I was downloading the version of KB3072630 for Windows Embedded POSReady 2009 32 bit, which is right for my system, and that definitely doesn't contain crypt32.dll! Why versions of the same patch for different versions of the OS should contain different files I have no idea, but I guess that maybe I do have the latest version of crypt32.dll for my system already. Link to comment Share on other sites More sharing options...
UCyborg Posted November 15, 2020 Share Posted November 15, 2020 2 hours ago, Vistapocalypse said: My guess is that those certificates have sha2 digital signatures only. Apparently XP has limited support for SHA-2 with only supported algorithm being RSA. The mentioned certificate uses ECDSA. 1 hour ago, Dave-H said: but I guess that maybe I do have the latest version of crypt32.dll for my system already. Probably, I haven't come across a POSReady 2009 update that would increase the version of crypt32.dll from 5.131.2600.6459. 1 Link to comment Share on other sites More sharing options...
egrabrych Posted December 15, 2020 Share Posted December 15, 2020 2 Link to comment Share on other sites More sharing options...
Dave-H Posted December 16, 2020 Share Posted December 16, 2020 Thanks! Link to comment Share on other sites More sharing options...
IXOYE Posted January 28, 2021 Share Posted January 28, 2021 Hi Microsoft Trusted Root Certificate List This is the list of all certificates Microsoft currently trusts and deploys via Windows Update https://cable.ayra.ch/ca/ 2 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now