Toutes mes réponses sur les forums

3 sujets de 106 à 108 (sur un total de 108)
  • Auteur
    Messages
  • paul
    Maître des clés

    We’ve run into this issue with KB978601 also.

    The key issue here is that MS stepped up enforcement in the signature validation subsystem in such a way that previously valid signatures now don’t validate.

    It’s a simple test:
    1. Uninstall KB978601
    2. Validate the signature (look in file properties). It’s okay.
    3. Install KB978601
    4. Validate the signature again. Now it’s invalid. Same file. Nothing changed except for WinTrust.dll (the core Authenticode DLL in Windows that is updated by KB978601).

    For our situation, the cab files that fail post-KB978601 validation are all similar: they all contain only 1 zero-length file. So essentially these cabs are empty (just a file list with no real contents). As soon as we put some dummy data in the cab file (20 characters in our case), the signature validated just fine.

    paul
    Maître des clés

    I’d hazard a guess that the file will need to be resigned. Update KB978601
    changes the way in which cabinet and executable files are signed; I’m not expert
    in this area, but from my interpretation of it this change will invalidate
    previously good signatures under certain circumstances.

    You might get better advice in microsoft.public.security.crypto.

    Harry.

    paul
    Maître des clés

    Is the digital signature valid?

    For home users (only), no-charge support is available by calling
    1-866-PCSAFETY (and/or 1-866-234-6020 and/or 1-800-936-5700) in the United
    States and in Canada or by contacting your local Microsoft subsidiary.
    There is no-charge for support calls that are associated with security
    updates. When you call, clearly state that your problem is related to a
    Security Update and cite the update’s KB number (e.g., KB978601).

    Or you can…

    Start a free Windows Update support incident request:
    https://support.microsoft.com/oas/de…spx?gprid=6527

    Customers who experience issues installing Microsoft security updates also
    can visit the following pages for assistance:
    https://consumersecuritysupport.microsoft.com/
    http://support.microsoft.com/ph/6527#tab3

    For more information about how to contact your local Microsoft subsidiary
    for security update support issues, visit the International Support Web
    site: http://support.microsoft.com/common/international.aspx

    For enterprise customers, support for security updates is available through
    your usual support contacts.

3 sujets de 106 à 108 (sur un total de 108)