Welcome to MSFN

Register now to gain access to all of our features. Once registered and logged in, you will be able to contribute to this site by submitting your own content or replying to existing content. You'll be able to customize your profile, receive reputation points as a reward for submitting content, while also communicating with other members via your own private inbox, plus much more! This message will be removed once you have signed in.


Sign in to follow this  
Followers 0
Bugs Bunny

rootsupd & disallowedcert

4 posts in this topic

I've always been using rootsupd.exe in the HF folder as there is a distinct code part in hfslip that handles rootsupd.exe

Now Microsoft seems to have changed the rootsupdate no longer supporting disallowedcert.
I've extracted an older version of rootsupd.exe and a newer one and compared the options available.
Old version:
wk6f.png
New version:
8jik.png

The –u option (add to disallowed root store) is no longer available.
The extracted rootsupd.exe does not contain a disallowedcert.sst file any more.

But still hfslip gets a disallowedcert.sst from somewhere else (but I do not know where-from).
During setup therefore an error shows up, because hfslip wants to run updroots.exe for disallowedcert.sst with the options –l –u and the –u option is no longer available.

So as Microsoft removed the –u option from updroots.exe, is it safe to remove the codepart from hfslip that handles disallowedcert.sst specifically? (this should resolve the error during setup)

        IF EXIST WORK\I386E\disallowedcert.sst (                 REN WORK\I386E\disallowedcert.sst rvkcert.sst                 ECHO>>SOURCESS\I386\TXTSETUP.SIF rvkcert.sst = 1,,,,,,,998,0,0&ECHO>>SOURCESS\I386\DOSNET.INF d1,rvkcert.sst                 ECHO>>WORK\HFSLIPCMDP1.TXT %%SYSTEMROOT%%\HFSLIP\updroots.exe -l -u %%SYSTEMROOT%%\HFSLIP\rvkcert.sst         ) 

Anyone knows where the disallowedcert.sst comes from (as it no longer comes from rootsupd.exe itself)?

0

Share this post


Link to post
Share on other sites

Well, the latest current disallowedcert.sst is located in rvkroots.exe (KB2917500). I don't know where HFSLIP expects to find it...

Edited by 5eraph
0

Share this post


Link to post
Share on other sites

Thanks for the replies!

With HFSLIP 1.7.10 beta K it now worked perfectly!

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.