Page 2 of 2

Re: Definition updates for Windows Defender Antivirus and ot

PostPosted: 09.05.2019, 19:28
by Dalai
@vcarrer:
What are you trying to tell us? DNS resolution fails on your system, fine. But what's your environment? How do you connect to the internet (proxy or not)? Do all files/downloads fail with this error?

Regards
Dalai

Re: Definition updates for Windows Defender Antivirus and ot

PostPosted: 10.05.2019, 07:40
by hbuhrmester
The connection switched from http to https due to a HSTS response:

https://en.wikipedia.org/wiki/HSTS

The problem is, that the script DownloadUpdates.cmd does not set the environment variable https_proxy, so that https connections over proxy servers fail:

https://forums.wsusoffline.net/viewtopic.php?f=5&t=8952
https://forums.wsusoffline.net/viewtopic.php?f=4&t=9131#p28393

This is a known bug by now, and it was verified twice, but there is not much I can do except reporting it.


PS

The server names are also different: go.microsoft.com, http://www.microsoft.com and definitionupdates.microsoft.com may or may not resolve to the same servers:

go.microsoft.com and http://www.microsoft.com both resolve to microsoft.com, but definitionupdates.microsoft.com resolves to e3673.g.akamaiedge.net. So a DNS resolution surely is necessary for each domain, even if they just look like subdomains.

But I think, this is not the problem here.

Regards,
hbuhrmester

Re: Definition updates for Windows Defender Antivirus and ot

PostPosted: 10.05.2019, 19:37
by Dalai
@vcarrer:
After you edited your post I think I understand you now. See hbuhrmester's explanation and links to fix it. Keep in mind that the fix is only of temporary nature, i.e. in works until you update WSUS Offline (which doesn't include the same fix).

Regards
Dalai

Re: Definition updates for Windows Defender Antivirus and ot

PostPosted: 10.05.2019, 21:11
by WSUSUpdateAdmin
Hi.

Dalai wrote: [...]works until you update WSUS Offline (which doesn't include the same fix).

:shock: Didn't I include the right fix today?

hbuhrmester wrote:This is a known bug by now, and it was verified twice, but there is not much I can do except reporting it.

Yes and sorry, Hartmut, but delays are rarely caused by laziness.
Life's hard at the coast... ;)

RTW

Re: Definition updates for Windows Defender Antivirus and ot

PostPosted: 10.05.2019, 22:05
by Dalai
WSUSUpdateAdmin wrote: :shock: Didn't I include the right fix today?

Sorry, didn't assume that it's fixed upstream so fast. Should've probably written "as long as WSUS Offline doesn't include the same fix". Never mind.

Regards
Dalai