Error: File signature verification failure

[harry]

Dann lass uns mal hoffen, daß spätestens Dienstag eine neue signierte wsusscn2.cab erscheint (aus welchem Anlass auch immer, Patchday ist ja erst am 13.)

[aker]

Bei Bedarf stelle ich meine korrekt signierte wsusscn2.cab zur Verfügung. Ist innerhalb der letzten Woche (aber vor diesem Fehler) geladen worden.

Viele Grüße

[boco]

Sollte sich das Problem bis Dienstag nicht erledigen, komme ich gern darauf zurück.

Übrigens gibt mir https://www.update.microsoft.com/ zurzeit eine "Untrusted Connection"...

[boco]

Geht gerade wieder...

[harry]

Microsoft has published a "new" version of WSUSSCN2.CAB (2015-09-23, 136.517.402 Bytes; including package.xml [2015-09-23 10:59:48, 77.674.982 Bytes]), which has a valid signature:

Code: Select all

D:\>\wsusoffline101\wsusoffline\bin\sigcheck -h d:\wsusscn2.cab

Sigcheck v2.20 - File version and signature viewer
Copyright (C) 2004-2015 Mark Russinovich
Sysinternals - www.sysinternals.com

d:\wsusscn2.cab:
        Verified:       Signed
        Signing date:   21:04 23.09.2015
        Publisher:      Microsoft Corporation
        Description:    n/a
        Product:        n/a
        Prod version:   n/a
        File version:   n/a
        MachineType:    n/a
        MD5:    BBCDA994C68840F64E029D776513BAC6
        SHA1:   905B371B7056DFAC2A5ABE4304D3F56A719F1AFC
        PESHA1: 535CD743EE523DDB486F998C92C173729B344E7E
        PE256:  AA1BFE26894BE66635B4EF93FF5DFD9702AC0B7137A4839F2B9EC6210A9BD67A
        SHA256: 80B397C059374886D0AED2730DED1494070508C93AED46911D92E75A7BD22925
        IMP:    n/a


[jamesaepp]

I can confirm it is now working. Thanks, team.

[harry]

Das CDN hinter download.windowsupdate.com spinnt mal wieder:

Code: Select all

D:\>ping download.windowsupdate.com

Ping wird ausgeführt für au.download.windowsupdate.com.c.footprint.net [8.253.81.110] mit 32 Bytes Daten:
{...}

D:\>wget -N --spider http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Spider mode enabled. Check if remote file exists.
--2015-10-06 20:36:06--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving download.windowsupdate.com (download.windowsupdate.com)... 8.253.81.126, 8.253.81.110, 8.254.199.62, ...
Connecting to download.windowsupdate.com (download.windowsupdate.com)|8.253.81.126|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 136446936 (130M) [application/octet-stream]
Remote file exists.


Das ist die nicht signierte WSUSSCN2.CAB (--> viewtopic.php?p=16912#p16912 )

Code: Select all

D:\>ping download.windowsupdate.com

Ping wird ausgeführt für c-0001.c-msedge.net [191.234.4.50] mit 32 Bytes Daten:
{...}

D:\>wget -N --spider http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Spider mode enabled. Check if remote file exists.
--2015-10-06 21:12:02--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving download.windowsupdate.com (download.windowsupdate.com)... 191.234.4.50
Connecting to download.windowsupdate.com (download.windowsupdate.com)|191.234.4.50|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 136517402 (130M) [application/octet-stream]
Remote file exists.


Das ist die WSUSSCN2.CAB mit korrekter Signatur (--> viewtopic.php?p=16944#p16944 )

Bei dem hier wird auch die richtige Datei geliefert:

Code: Select all

D:\>ping download.windowsupdate.com

Ping wird ausgeführt für a767.dspw65.akamai.net [2.16.216.41] mit 32 Bytes Daten:
{...}


[WSUSUpdateAdmin]

Moin!

Dazu passend: Zertifikats-Schmu bei Windows Update beunruhigt Nutzer: "[...]Ein ähnliches Problem scheint der Grund dafür zu sein, dass WSUS-Offline-Updates momentan nicht funktionieren.[...]"

Gruß
Torsten

[harry]

There is a new WSUSSCN2.CAB (with valid signature) at least on one server:

Code: Select all

D:\>ping download.windowsupdate.com

Ping wird ausgeführt für c-0001.c-msedge.net [191.234.4.50] mit 32 Bytes Daten:
{...}

D:\>wget -N --spider http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Spider mode enabled. Check if remote file exists.
--2015-10-08 09:53:37--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving download.windowsupdate.com (download.windowsupdate.com)... 191.234.4.50
Connecting to download.windowsupdate.com (download.windowsupdate.com)|191.234.4.50|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 136447818 (130M) [application/octet-stream]
Remote file exists.

Code: Select all

D:\>\wsusoffline101\wsusoffline\bin\sigcheck -h wsusscn2.cab

Sigcheck v2.20 - File version and signature viewer
Copyright (C) 2004-2015 Mark Russinovich
Sysinternals - www.sysinternals.com

D:\wsusscn2.cab:
        Verified:       Signed
        Signing date:   22:02 06.10.2015
        Publisher:      Microsoft Corporation
        Description:    n/a
        Product:        n/a
        Prod version:   n/a
        File version:   n/a
        MachineType:    n/a
        MD5:    C45966B2C0313C9BBE6394B7D588AF73
        SHA1:   3FFBF6C832B5B8563605E44B413D03A1BA4150D7
        PESHA1: 71514AED5262AAF74753CEE74921499DF2F578B5
        PE256:  3C42A6A192987B0AF0D83BA704A7FC1096C92D48BAF70EFB3DA28472066FBFCF
        SHA256: E435F9012E71B4E27A893B25C2DFBF05338D07C7CAC475DF2B826407ACFA9FD8
        IMP:    n/a


supplement:
Also the problematic server delivers the file with the right size:

Code: Select all

D:\>ping download.windowsupdate.com

Ping wird ausgeführt für au.download.windowsupdate.com.c.footprint.net [8.253.81.126] mit 32 Bytes Daten:
{...}

D:\>wget -N --spider http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Spider mode enabled. Check if remote file exists.
--2015-10-08 10:20:44--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving download.windowsupdate.com (download.windowsupdate.com)... 8.253.81.126, 8.253.81.110, 4.23.47.126
Connecting to download.windowsupdate.com (download.windowsupdate.com)|8.253.81.126|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 136447818 (130M) [application/octet-stream]
Server file no newer than local file 'wsusscn2.cab' -- not retrieving.


Hopefully the problem is thus eliminated.