On decommissioning of update servers for 2000, XP, (and Vista?) as of July 2019

[AstroSkipper]

12 hours ago, LonghornXP said:

I did all your step and I'm got it work without /resetauthorization 

Is it really working anymore? After restarting and without accessing MU or WU web site? I don't believe that.  Can you post a proof? 

Edited April 7, 2022 by AstroSkipper

[AstroSkipper]

On 1/11/2022 at 12:04 AM, maile3241 said:

But after I downloaded the sha-2 patch from @max-h,

@maile3241 What kind of patch did you mean in your comment from January? Was it patched wuaueng.dll?

Edited April 7, 2022 by AstroSkipper

[maile3241]

2 hours ago, LonghornXP said:

@maile3241 Do u still have that "old" extra certificates?

See my first post on page 43.

1 minute ago, AstroSkipper said:

@maile3241 What kind of patch did you mean in your comment from January?

That was here. It is the same.

 

[AstroSkipper]

1 minute ago, maile3241 said:

That was here. It is the same.

Is AU still working in your Windows XP system despite error codes in WindowsUpdate.log?

[maile3241]

3 minutes ago, AstroSkipper said:

Is AU still working in your Windows XP system despite error codes in WindowsUpdate.log?

Yes, it works perfectly.

[Dave-H]

2 hours ago, AstroSkipper said:

In my system AU and notification shield worked exactly one Windows session. After restart it didin't work anymore. I have to find out what's going wrong here. Therefore one question. Which version of crypt32.dll do you have currently in your Windows XP system? My version is 5.131.2600.6459 from Oktober of 2013.

My version of crypt32.dll is 5.131.2600.6459, same as yours, dated 7/10/13.

[maile3241]

I have HTTPSProxy running in Win 7 and when I check for updates I get a similar error to AU in Xp. Without proxy the search works. Apparently AU in Xp does not like the proxy. WU in Win 7 does not like the proxy either.

Edited April 7, 2022 by maile3241

[AstroSkipper]

4 hours ago, maile3241 said:

5 hours ago, AstroSkipper said:

Is AU still working in your Windows XP system despite error codes in WindowsUpdate.log?

Yes, it works perfectly.

Thanks for reply! What's your version of crypt32.dll? Under which conditions do you run AU? If AU works perfectly in your system, then there has to be a significant difference from my system to your. Maybe we can find it.

5 minutes ago, maile3241 said:

I have HTTPSProxy running in Win 7 and when I check for updates I get a similar error to AU in Xp. Without proxy the search works. Apparently AU in Xp does not like the proxy.

I think there is a problem with the certificate of wuident.cab. It can't be verified. In XP the signature is not valid. A timestamp is missing and it's not counter-signed.

[RainyShadow]

9 hours ago, AstroSkipper said:

Which version of crypt32.dll do you have currently in your Windows XP system?

C:\WINDOWS\system32\CRYPT32.dll loaded by wuauclt.exe is v.5.131.2600.6459 here.

I just set the AU service from disabled to manual, then a wuauclt /detectnow and after few seconds the shield popped. 

After i stopped the service (followed by killing the wuauclt process as it was stuck stopping), i tried with wuauclt /resetauthorization /detectnow and got the same result. 

 

P.S. i got this in the ProxHTTPSProxy log: 

[22:28] 027 [P] "HEAD https://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071928" 200 20002
[22:30] 027 ProxHTTPSProxyMII FrontProxy/v1.5 [WinError 10054] An existing connection was forcibly closed by the remote host
[22:30] 028 [P] "HEAD https://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071930" 200 20002
[22:32] 028 ProxHTTPSProxyMII FrontProxy/v1.5 [WinError 10054] An existing connection was forcibly closed by the remote host
[22:34] 029 [P] "HEAD https://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071933" 200 20002
[22:36] 029 ProxHTTPSProxyMII FrontProxy/v1.5 [WinError 10054] An existing connection was forcibly closed by the remote host

 

and this in BFilter:

http://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071928
http://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071930
http://fe2.update.microsoft.com/v11/3/win7sp1/windowsupdate/selfupdate/wuident.cab?2204071933

all three with size 0, probably cached...

Edited April 7, 2022 by RainyShadow

[AstroSkipper]

5 minutes ago, RainyShadow said:

C:\WINDOWS\system32\CRYPT32.dll loaded by wuauclt.exe is v.5.131.2600.6459 here.

I just set the AU service from disabled to manual, then a wuauclt /detectnow and after few seconds the shield popped. 

After i stopped the service (followed by killing the wuauclt process as it was stuck stopping), i tried with wuauclt /resetauthorization /detectnow and got the same result.

Thanks for this information! I had success once yesterday but after restarting system it didn't work anymore. No idea why!

Edited April 7, 2022 by AstroSkipper

[RainyShadow]

Updated previous post. 

No browsers running at the time.

[maile3241]

2 hours ago, AstroSkipper said:

Thanks for reply! What's your version of crypt32.dll? Under which conditions do you run AU? If AU works perfectly in your system, then there has to be a significant difference from my system to your. Maybe we can find it.

I think there is a problem with the certificate of wuident.cab. It can't be verified. In XP the signature is not valid. A timestamp is missing and it's not counter-signed.

I also think that the certificate is the problem. As far as I remember I think I got the yellow sign when I first opened the WU website. But I am not sure anymore. I'll install a fresh xp and then try again. My version is 5.131.2600.6459.

[AstroSkipper]

31 minutes ago, RainyShadow said:

all three with size 0, probably cached...

I'm able to download them, size 20 KB. But what is BFilter? Do you mean the BFilter, a filtering web proxy?

Edited April 7, 2022 by AstroSkipper

[AstroSkipper]

14 minutes ago, maile3241 said:

I also think that the certificate is the problem. As far as I remember I think I got the yellow sign when I first opened the WU website. But I am not sure anymore. I'll install a fresh xp and then try again. My version is 5.131.2600.6459.

Just to clarify, you said it works perfectly in your Windows XP system. Even now?

[RainyShadow]

59 minutes ago, AstroSkipper said:

I'm able to download them, size 20 KB.

Able to download through your browser, or your AU is able to download them? 

 

1 hour ago, AstroSkipper said:

But what is BFilter? Do you mean the BFilter, a filtering web proxy?

Yes, the one i mentioned here a few times - https://msfn.org/board/topic/183295-web-browser-proxomitron-reborn-ptrongui-a-how-to-guide/

 

 

I tried again after cleaning all caches, the certs folder, logs, etc.

BFilter still says 0 as size. There is this number 20002 in ProxHTTPSProxy, is it the file size? 

Have couple logs for your viewing pleasure  

 WindowsUpdate.log

ReportingEvents.log (from C:\Windows\SoftwareDistribution)

There is an error recorded, but the shield appears regardless. 

No related errors in the event viewer.