Can I cache downloaded updates?

[friday123]

I want to integrate two windows updates that are not listed as security updates to my WSUSOffline builds. I have added a custom update before after getting some advice on how to add download links for the update (see thread Include the post service pack hotfix rollup for Win 7 SP1).

But if I already have the updates downloaded can I just add a cached version of them? I want to add the updates below but I am concerned the download links could change. Also, I had to do genuine verification before I could download the files.

KB2506014 - An issue has been identified that could allow a user with administrative permissions to load an unsigned driver.

Code: Select all

http://download.microsoft.com/download/D/B/2/DB23C949-6F3F-455F-A048-FE7C8CDB97A9/Windows6.0-KB2506014-x64.msu
http://download.microsoft.com/download/9/8/5/98578ACE-4837-437E-B51B-E4C4C8DFE7AB/Windows6.1-KB2506014-x64.msu

KB2718704 - Unauthorized digital certificates could allow spoofing.

Code: Select all

http://download.microsoft.com/download/D/0/7/D07BC77B-ECE5-4BD9-80F8-17C5C237B1A0/WindowsXP-KB2718704-x86-ENU.exe
http://download.microsoft.com/download/B/C/3/BC388BA3-D4CC-4D16-BF84-1A1154FB5599/WindowsServer2003-KB2718704-x86-ENU.exe
http://download.microsoft.com/download/9/7/8/97859DB6-04A2-43A5-B9E8-C37180425D08/WindowsServer2003.WindowsXP-KB2718704-x64-ENU.exe

http://download.microsoft.com/download/D/7/A/D7A4C58C-A0E8-4CD7-A405-36C787637474/Windows6.0-KB2718704-x86.msu
http://download.microsoft.com/download/7/3/1/731F9EE8-438E-4411-A994-2D0A1443501F/Windows6.0-KB2718704-x64.msu

http://download.microsoft.com/download/4/1/3/413A9B3D-DC56-4DD8-8944-9B0DB0CC8025/Windows6.1-KB2718704-x86.msu
http://download.microsoft.com/download/1/7/8/1787B87D-5DA3-44EF-A393-F15BF8EA3FBF/Windows6.1-KB2718704-x64.msu

Thanks

[aker]

If you put the links in the StaticDowloadLinks-xxx.txt, you may copy them into the directorires .\client\w61\glb (Window 7 x86) and wsusou will recognize them.

[friday123]

If you put the links in the StaticDowloadLinks-xxx.txt, you may copy them into the directorires .\client\w61\glb (Window 7 x86) and wsusou will recognize them.

A few questions. I will need to add to the StaticUpdateIds as well right? Also I've noticed in those directories are almost all cab files, for example like this: windows6.0-kb2829361-x86_9b7121f854595ac945ee4c1d78003ad83542881e.cab. Do I need some special cab file instead of the msu files? And if I put those files that I downloaded there, what happens if the download links go bad? Thanks again

[aker]

You do not need a special cab file, wsusou is able to install msu's too.
If you want wsusou to install the patch you need to add it to StaticUpdateIds-xxx.txt.
I don't think that the download links will get bad in the future, but then wsusou will write a warning to the logfile (.\logs\download.log).

[friday123]

Alright here's what I got:

Code: Select all

echo http://download.microsoft.com/download/D/B/2/DB23C949-6F3F-455F-A048-FE7C8CDB97A9/Windows6.0-KB2506014-x64.msu>>static\custom\StaticDownloadLinks-w60-x64-glb.txt
echo http://download.microsoft.com/download/9/8/5/98578ACE-4837-437E-B51B-E4C4C8DFE7AB/Windows6.1-KB2506014-x64.msu>>static\custom\StaticDownloadLinks-w61-x64-glb.txt

echo KB2506014>>client\static\custom\StaticUpdateIds-w60-x64.txt
echo KB2506014>>client\static\custom\StaticUpdateIds-w61-x64.txt

echo http://download.microsoft.com/download/D/0/7/D07BC77B-ECE5-4BD9-80F8-17C5C237B1A0/WindowsXP-KB2718704-x86-ENU.exe>>static\custom\StaticDownloadLinks-wxp-x86-glb.txt
echo http://download.microsoft.com/download/B/C/3/BC388BA3-D4CC-4D16-BF84-1A1154FB5599/WindowsServer2003-KB2718704-x86-ENU.exe>>static\custom\StaticDownloadLinks-w2k3-x86-glb.txt
echo http://download.microsoft.com/download/9/7/8/97859DB6-04A2-43A5-B9E8-C37180425D08/WindowsServer2003.WindowsXP-KB2718704-x64-ENU.exe>>static\custom\StaticDownloadLinks-w2k3-x64-glb.txt

echo KB2718704>>client\static\custom\StaticUpdateIds-wxp-x86.txt
echo KB2718704>>client\static\custom\StaticUpdateIds-w2k3-x86.txt
echo KB2718704>>client\static\custom\StaticUpdateIds-w2k3-x64.txt

echo http://download.microsoft.com/download/D/7/A/D7A4C58C-A0E8-4CD7-A405-36C787637474/Windows6.0-KB2718704-x86.msu>>static\custom\StaticDownloadLinks-w60-x86-glb.txt
echo http://download.microsoft.com/download/7/3/1/731F9EE8-438E-4411-A994-2D0A1443501F/Windows6.0-KB2718704-x64.msu>>static\custom\StaticDownloadLinks-w60-x64-glb.txt

echo KB2718704>>client\static\custom\StaticUpdateIds-w60-x86.txt
echo KB2718704>>client\static\custom\StaticUpdateIds-w60-x64.txt

echo http://download.microsoft.com/download/4/1/3/413A9B3D-DC56-4DD8-8944-9B0DB0CC8025/Windows6.1-KB2718704-x86.msu>>static\custom\StaticDownloadLinks-w61-x86-glb.txt
echo http://download.microsoft.com/download/1/7/8/1787B87D-5DA3-44EF-A393-F15BF8EA3FBF/Windows6.1-KB2718704-x64.msu>>static\custom\StaticDownloadLinks-w61-x64-glb.txt

echo KB2718704>>client\static\custom\StaticUpdateIds-w61-x86.txt
echo KB2718704>>client\static\custom\StaticUpdateIds-w61-x64.txt

I don't think that the download links will get bad in the future, but then wsusou will write a warning to the logfile (.\logs\download.log).

But if the download links do go bad then what happens? Will WSUSou still use the cached copies or delete them?

[aker]

It will still use them.

[friday123]

I had one problem with this. Rather than let wsusoffline update download the update files since I had already downloaded them I just moved them to the appropriate glb directories. When I tried to build ISOs I couldn't because of missing hash. For example:

Code: Select all

Verifying integrity of existing updates for w60 glb...
..\w60\glb\Windows6.0-KB2718704-x86.msu: No match
hashdeep64.exe: Audit failed
   Input files examined: 0
  Known files expecting: 0
          Files matched: 186
Files partially matched: 0
            Files moved: 0
        New files found: 1
  Known files not found: 0


So it looks like wsusoffline update has to download at least once whatever custom update you want so that it can add its hash to the hash list. There's probably a way to get around that but I don't know how. Right now it's not necessary since the download links still work.

[harry]

I think this behavior is intended. If the repository was modified manually, then simply delete the corresponding *.txt files in the directory .\client\md and run UpdateGenerator.exe again.