Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 



heinoganda

Root Certificates and Revoked Certificates for Windows XP

Recommended Posts

For all who are interested in an independent Update Root Certificates and revoked certificates, I want to offer a small downloader and updater (available now) without version confusion.

 

Download

 

Archive Password:

xU7DWBLyTIZ38V5vJZpH5TsefB6vkJhS4QH5TIefi7m9n1XfR2phS41XB6j

Eliminates misspellings, change from "Continue updating?" to "Do you want to update certificates?" thanks @hmuellers 

 

 

update 12/18/2015  Version 1.1

The creation date of the downloaded sst files appears.
 

update 02/16/2016  Version 1.2

Due Country-specific formats of date display, partly the creation date of sst files was not correctly displayed.
 
 

:)

Edited by heinoganda
  • Like 1

Share this post


Link to post
Share on other sites

@blackwingcat

Thanks.

I've over-ridden the warning, and it seems to have installed fine!

:thumbup

 

@ heinoganda

I've just downloaded it thanks.

Does this do the same thing as blackwingcat's file I've just installed?

Presumably it doesn't enable future certificate updates to happen automatically, I would have to implement the procedure you outlined before to do that.

:)

Edited by Dave-H

Share this post


Link to post
Share on other sites

@Dave-H

 

Not quite: when you run the program the current root certificates and rekoved certificates are freshly downloaded and then updated thereafter. It can be executed at any time to update the certificates, but an Internet connection to MS is required, in order for it to be able to retrieve the latest certificates.

 

 

:)

  • Upvote 1

Share this post


Link to post
Share on other sites

Thank you!

I ran it and it worked fine.

Presumably it has installed the same certificates as blackwingcat's file, as they are the most recent?

I looked at the contents of the installer, and I think I understand what it does.

Am I right in assuming that a new version of this will be need to be made every time the certificates are updated?

:)

Share this post


Link to post
Share on other sites

@ Dave-H

Excuse my bad English, you need no new program as long as the download links work. If MS updated the certificates then this program will download the newer root certificates and revoked certificates (https://technet.microsoft.com/en-us/library/security/dn904173.aspx). It is enough to run it every 3 months, except at times when there is an Security Advisory announcement due to uncertain certificates. (Which I'll announce in this forum also).

 

:)

  • Upvote 1

Share this post


Link to post
Share on other sites

Please don't apologise, your English is a great deal better than my German!

:lol:

That's good to know that your program should work to download later certificate updates as well as the current ones.

blackwingcat's update file is a modified version of the MS original update patch by the look of it, so only contains the current October 2015 certificates.

What made me wonder was the version numbers in the inf files, which I thought would change and prevent it working with later updates.

:)

Edited by Dave-H

Share this post


Link to post
Share on other sites

@ Dave-H

 

If you are a few posts back go there a lot to read, I use the latest version numbers were where officially in updates where to refer on WU and MU (especially were offered in May 2014. by WU and MU otherwise an older update, I'm a bit careful because nobody knows what that MS still in the future at WU and MU incorporates for queries, especially for Windows XP.) 

The Cert Updater incidentally is no version number, to the confusion not able to finish.

 

:)

Edited by heinoganda

Share this post


Link to post
Share on other sites

@hmuellers

 

At times before the end of support, and at the present time these two updates were only to undo in the corresponding are removed certificates by hand in the Certificate Manager.

 

(Thanks for the hint, I have created until now, and I'm going to change immediately, will not affect the function.)

 

:)

Edited by heinoganda

Share this post


Link to post
Share on other sites

@hmuellers

 

Have it changed in "Do you want to update certificates?", think this is ok.

(Thank you for the suggestion)

 

:)

Share this post


Link to post
Share on other sites

can you extract those certs and upload them ?

There's no reason for that. heinoganda's tutorial already gives links for the certificates.

I posted a tutorial here where one lets me current Roots certificates and revoked certificate for Windows XP again. Now, the steps followed exactly, then you will understand what is at stake with these version numbers! Incidentally, there is not that you should download and install only "rvkroots.exe" and / or "rootsupd.exe". :no:

Share this post


Link to post
Share on other sites

@vinifera

The small downloader and updater for certificates based on the turtorial have previously published.

 

@all

In this context I have just a conversation with Monroe (PM) based on the topic "Certificates manager Question" where it sometimes comes to SHA-2 certificates. Currently one needs KB3055973 to get more functionality. Because this update can be installed only on the English version of Windows XP, users can get this as a multilingual version by request (PM).

 

:)

Edited by heinoganda

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Recently Browsing   0 members

    No registered users viewing this page.

×