|
(not that this has ever kept me from posting before):
Lately, on Windows 10 or Server 2016, a lot of files I've downloaded direct from MS refuse to install as, it turns out, they apparently think the digital signature is not valid. I've seen this for some of the monthly cumulative updates for Windows 10 or Server 2016, cumulative updates for SQL Server, and SQL Server Management Studio. The same files, according to a Windows 7 machine, are showing that the signatures are valid and I have no problem installing those updates (where applicable - for example, obviously, I can't install a Win10 CU on 7).
I have at least 4 VMs (and a physical machine) running either Win10 or Server 2016 showing this bogus "bad cert" problem. Files have been re-downloaded many times, and hashes match every time. The system clock varies by maybe up to 3 minutes between all of my machines (and they're all set in the correct time zone), so a 3-minute drift shouldn't result in this sort of cert check failure.
Where does one even begin to diagnose such a thing?
|
|
|
|
|
format pc -- or if u had installed man in the middle stuff like fiddler you may need to purge your windows keystore of invalid certs etc
Caveat Emptor.
"Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
modified 1-Feb-19 7:11am.
|
|
|
|
|
abmv wrote: format pc
Seems drastic.
abmv wrote: if u had installed man in the middle stuff like fiddler you may need to purge your windows keystore of invalid certs etc
This has started happening on a bunch of completely independent machines, both physical and virtual. I generally don't d*ck around with the cert store, and I know for a fact I haven't installed Fiddler on any of them.
|
|
|
|
|
https://www.catalog.update.microsoft.com/Home.aspx -- maybe u can try from here and see the same updates manually...
Caveat Emptor.
"Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
|
|
|
|
|
That's where I get them from. At least the Win10/Server 2016 cumulative updates. I hadn't tried to look up the SQL Server CUs from there, but I'm doing that now. Also - I don't think something like SQL Server Management Studio ever gets posted to that site, as it's not an "update" per se, but rather a full product.
[Edit]
This is insane.
I just redownloaded SQL Server 2016 SP2 CU5 from the update catalog, rather than the usual MS download site. Even though the filenames are slightly different, the sizes match, and the hashes are identical. Yet if I right-click on both and select Properties, Digital Signatures, select one of the two, and click on details - the file from catalog...* shows it's OK, even though (and I've just re-confirmed) the file from downloads...* is still showing as invalid.
This makes zero sense, given that the file hashes match.
modified 2-Feb-19 8:52am.
|
|
|
|
|
Check your PCs date time and time zone settings.
|
|
|
|
|
As I mentioned, they're all in the same timezone, and time drift between all the machines is within 3 minutes of each other.
|
|
|
|
|
What really pisses me off is when you download something from the MS web site and it won't install because it wasn't from the store!Why put something for download if it won't work?
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
That's a new one to me. Got an example?
Oh, and just to add to my original post - I did click that "Unblock" button from all my downloaded files so the "downloaded from the Internet" flag is removed.
|
|
|
|
|
Sure, I downloaded Visual Studio Community edition and Windows complained that it wasn'tMS store validated
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
dandy72 wrote: Where does one even begin to diagnose such a thing?
Following perhaps.
How to troubleshoot app package signature errors - Windows applications | Microsoft Docs[^]
Just a thought based on something that happened years ago to me, are you doing extensive port blocking? Case I had MS changed validation methodology and they were using a port that was blocked so it failed with no indication at all that the blocked port was the problem.
|
|
|
|
|
Good link. Even though none of these are store apps, I'm sure some items apply. I'll take a closer look.
As for port blocking - I don't block any ports beyond whatever defaults Windows firewall is using, and whatever defaults are used by DD-WRT on my router.
That said, I do use Pi-Hole, which re-routes requests for known advertisers to nowhere, but its configuration hasn't changed since before this problem started happening.
|
|
|
|
|
I have a great job and make a good living doing cool things with you.
To keep balance in the force. 
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
brown-noser...
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
John Simmons / outlaw programmer wrote: brown-noser
What color nose does one have when they complain all the time?
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
ZurdoDev wrote: What color nose does one have when they complain all the time?
Given we're talking about a MS product...various shades of deep red, depending on your current blood pressure.
|
|
|
|
|
Reminds me of when I
had a conversation with my boss about my career. I told him I wasn't worried about any promotions because the company discriminated based on color. He asked Why I thought that and I told him, my nose is the wrong color.
I was right, I never got another promotion, but I got a year's severance pay at lay off, so it worked out just fine!
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
Walt Fair, Jr. wrote: a year's severance pay at lay off,
Nice! I'd take that.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
I took it and never looked back.
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
|
Just... wow...
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
So you have an issue with my consultancy?
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
I do too.
I have my issues with VS and Microsoft in general, but I must be using it way differently then most of the MS haters in this forum, as I really enjoy VS and it helps make a good living for myself, so that I am not like, homeless and crap.
|
|
|
|
|
Slacker007 wrote: I must be using it way differently then most of the MS haters in this forum,
That gives me an idea. I'm going to offer Microsoft training to anyone who wants it. You don't have to suffer. 
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
Hopefully Microsoft will take you up on your offer since they definitely need a lot of training. I find a new bug just about every week and this week was no exception.
"They have a consciousness, they have a life, they have a soul! Damn you! Let the rabbits wear glasses! Save our brothers! Can I get an amen?"
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
