wsusscn2.cab signature verification failure

Re: wsusscn2.cab signature verification failure

Postby boco » 28.10.2016, 13:40

Looks like they pushed a new CU to Windows 10 and needed to update the file. :roll:

Following the second-Tuesday-Patchday, the situation is sometimes chaotic. We've seen grown men cry. :mrgreen:


Fun aside, visit us next Patchday and you'll see what I'm talking about. WSUSSCN2.CAB is the fuel that makes the WSUSOU train roll... Without it, rien ne va plus.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2323
Joined: 24.11.2009, 17:00
Location: Germany

Re: wsusscn2.cab signature verification failure

Postby luxor » 29.10.2016, 14:33

after this "unsigned" problem, I encounter wsusoffline updater to download wsusscn2.cab every time again and again.

3 times during one update round.

I download updates for Win7, Win10 and Office. Every step, the wsusoffline re-downloads the wsusscn2.cab file...
luxor
 
Posts: 20
Joined: 13.08.2014, 16:52

Re: wsusscn2.cab signature verification failure

Postby Denniss » 29.10.2016, 15:01

MS server/load balancer issues as encountered far too often. They may issue the same file but multiple servers may have multiple timestamps, differeing only by some seconds. Thus the file is reported as being newer and downloaded again.
But it's not secured that you get the download from the server reporting the 'new' timestamp.
Denniss
 
Posts: 869
Joined: 01.08.2009, 10:51

Re: wsusscn2.cab signature verification failure

Postby boco » 29.10.2016, 19:43

What I would like to see is a 'custom catalog mode' where I do care about supplying a valid, up-to-date version of wsusscn2.cab, myself. WSUSOU would then use that catalog until I replace it with another.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2323
Joined: 24.11.2009, 17:00
Location: Germany

Re: wsusscn2.cab signature verification failure

Postby hbuhrmester » 30.10.2016, 13:37

after this "unsigned" problem, I encounter wsusoffline updater to download wsusscn2.cab every time again and again.

3 times during one update round.


Recently, I had a similar experience: I copied the wsusoffline folder to a FAT-32 volume and ran the download from there. Then some updates would reproducibly get downloaded again on every run.

The problem is, that FAT-32 volumes have a time resolution of 2 seconds only for the modification date:

Date resolution
2 seconds for last modified time,
10 ms for creation time,
1 day for access date,
2 seconds for deletion time

-- https://en.wikipedia.org/wiki/File_Allocation_Table


But this means, that some downloads were reproducibly one second off. The remote file on the server was always one second newer, and then the same file was downloaded again.

This was with Linux, which was a bad combination anyway; but FAT-32 is still widely used on USB sticks, and I didn't bother to reformat it with some other file system.

Also, this wasn't about wsusscn2.cab in particular, but about other downloads as well.

PS:

A radical solution might be, to not use server timestamps, but just the current date and time, at least for some downloads. Aria2 actually does this by default, and Wget has an option to do so:

Code: Select all
--no-use-server-timestamps
    Don't set the local file's timestamp by the one on the server.

    By default, when a file is downloaded, its timestamps are set to
    match those from the remote file. This allows the use of
    --timestamping on subsequent invocations of wget. However, it is
    sometimes useful to base the local file's timestamp on when it was
    actually downloaded; for that purpose, the
    --no-use-server-timestamps option has been provided.
hbuhrmester
 
Posts: 459
Joined: 11.10.2013, 20:59

Re: wsusscn2.cab signature verification failure

Postby alkloyd » 07.11.2016, 23:41

This is still not fixed...
and I can download http://download.windowsupdate.com/micro ... usscn2.cab by hand but it has no signature...
and I don't have a client/md folder...

Code: Select all
Mon 11/07/2016 11:26:39.20 - Info: Starting WSUS Offline Update download (v. 10.8) for w63 glb
Mon 11/07/2016 11:26:39.21 - Info: Option /includedotnet detected
Mon 11/07/2016 11:26:39.22 - Info: Option /includewddefs detected
Mon 11/07/2016 11:26:39.26 - Info: Option /verify detected
Mon 11/07/2016 11:26:39.27 - Info: Option /exitonerror detected
Mon 11/07/2016 11:26:39.32 - Info: Set time zone to LOC10:00
2016-11-07 11:26:39 URL:http://download.wsusoffline.net/StaticDownloadFiles-modified.txt [341/341] -> "../static/StaticDownloadFiles-modified.txt" [1]
2016-11-07 11:26:41 URL:http://download.wsusoffline.net/StaticUpdateFiles-modified.txt [63/63] -> "../client/static/StaticUpdateFiles-modified.txt" [1]
Mon 11/07/2016 11:26:42.63 - Info: Updated static download and update definitions
Mon 11/07/2016 11:26:45.89 - Info: Downloaded/validated mkisofs tool
Mon 11/07/2016 11:26:47.84 - Info: Downloaded Sysinternals' tools Autologon, Sigcheck and Streams
Mon 11/07/2016 11:27:11.20 - Info: Downloaded/validated most recent Windows Update catalog file
Mon 11/07/2016 11:27:11.20 - Warning: Deleted unsigned file "C:\Users\ernes\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
Mon 11/07/2016 11:27:13.87 - Error: Catalog file ..\client\wsus\wsusscn2.cab signature verification failure

--------------------------------------------------------------------------------

Mon 11/07/2016 11:27:50.98 - Info: Starting WSUS Offline Update download (v. 10.8) for w63 glb
Mon 11/07/2016 11:27:50.99 - Info: Option /includedotnet detected
Mon 11/07/2016 11:27:51.00 - Info: Option /includewddefs detected
Mon 11/07/2016 11:27:51.04 - Info: Option /verify detected
Mon 11/07/2016 11:27:51.05 - Info: Option /exitonerror detected
Mon 11/07/2016 11:27:51.11 - Info: Set time zone to LOC10:00
Mon 11/07/2016 11:27:58.15 - Info: Updated static download and update definitions
Mon 11/07/2016 11:27:58.68 - Info: Downloaded/validated mkisofs tool
Mon 11/07/2016 11:27:58.73 - Warning: Integrity database ..\client\md\hashes-wsus.txt not found
Mon 11/07/2016 11:28:27.70 - Info: Downloaded/validated most recent Windows Update catalog file
Mon 11/07/2016 11:28:27.70 - Warning: Deleted unsigned file "C:\Users\ernes\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
Mon 11/07/2016 11:28:29.17 - Error: Catalog file ..\client\wsus\wsusscn2.cab signature verification failure

--------------------------------------------------------------------------------

Mon 11/07/2016 12:20:40.82 - Info: Starting WSUS Offline Update download (v. 10.8) for w63 glb
Mon 11/07/2016 12:20:40.82 - Info: Option /includedotnet detected
Mon 11/07/2016 12:20:40.84 - Info: Option /includewddefs detected
Mon 11/07/2016 12:20:40.88 - Info: Option /verify detected
Mon 11/07/2016 12:20:40.90 - Info: Option /exitonerror detected
Mon 11/07/2016 12:20:40.95 - Info: Set time zone to LOC10:00
Mon 11/07/2016 12:20:43.93 - Info: Updated static download and update definitions
Mon 11/07/2016 12:20:44.44 - Info: Downloaded/validated mkisofs tool
Mon 11/07/2016 12:20:44.49 - Warning: Integrity database ..\client\md\hashes-wsus.txt not found
Mon 11/07/2016 12:21:15.38 - Info: Downloaded/validated most recent Windows Update catalog file
Mon 11/07/2016 12:21:15.39 - Warning: Deleted unsigned file "C:\Users\ernes\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
Mon 11/07/2016 12:21:17.34 - Error: Catalog file ..\client\wsus\wsusscn2.cab signature verification failure

--------------------------------------------------------------------------------

Mon 11/07/2016 12:30:39.20 - Info: Starting WSUS Offline Update download (v. 10.8) for w63 glb
Mon 11/07/2016 12:30:39.20 - Info: Option /includedotnet detected
Mon 11/07/2016 12:30:39.22 - Info: Option /includewddefs detected
Mon 11/07/2016 12:30:39.26 - Info: Option /verify detected
Mon 11/07/2016 12:30:39.27 - Info: Option /exitonerror detected
Mon 11/07/2016 12:30:39.32 - Info: Set time zone to LOC10:00
Mon 11/07/2016 12:30:42.87 - Info: Updated static download and update definitions
Mon 11/07/2016 12:30:43.44 - Info: Downloaded/validated mkisofs tool
Mon 11/07/2016 12:30:43.54 - Warning: Integrity database ..\client\md\hashes-wsus.txt not found
Mon 11/07/2016 12:31:23.64 - Info: Downloaded/validated most recent Windows Update catalog file
Mon 11/07/2016 12:31:23.64 - Warning: Deleted unsigned file "C:\Users\ernes\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
Mon 11/07/2016 12:31:25.63 - Error: Catalog file ..\client\wsus\wsusscn2.cab signature verification failure

--------------------------------------------------------------------------------

Mon 11/07/2016 12:34:03.78 - Info: Starting WSUS Offline Update download (v. 10.8) for ofc glb
Mon 11/07/2016 12:34:03.79 - Info: Option /includedotnet detected
Mon 11/07/2016 12:34:03.80 - Info: Option /includewddefs detected
Mon 11/07/2016 12:34:03.85 - Info: Option /verify detected
Mon 11/07/2016 12:34:03.86 - Info: Option /exitonerror detected
Mon 11/07/2016 12:34:03.91 - Info: Set time zone to LOC10:00
Mon 11/07/2016 12:34:09.94 - Info: Updated static download and update definitions
Mon 11/07/2016 12:34:10.46 - Info: Downloaded/validated mkisofs tool
Mon 11/07/2016 12:34:10.52 - Warning: Integrity database ..\client\md\hashes-wsus.txt not found
alkloyd
 

Re: wsusscn2.cab signature verification failure

Postby aker » 11.11.2016, 07:33

Unsigned wsusscn2.cab is nearly worthless, as WUA refuses to use it. MS currently serves just broken files. Please try again until you get a working one.
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker


WSUS Offline Update „Community Edition“ 12.3.1 / 11.9.6esr
https://gitlab.com/wsusoffline
aker
 
Posts: 3683
Joined: 02.03.2011, 15:32

Re: wsusscn2.cab signature verification failure

Postby RJARPCGP » 12.11.2016, 01:07

aker wrote:Unsigned wsusscn2.cab is nearly worthless, as WUA refuses to use it. MS currently serves just broken files. Please try again until you get a working one.


I confirmed that mirrors are serving corrupted wsusscn2.cab files, not only is the digital signature missing, the cab viewer gives the dreaded "Cannot open the cab file." (or similar) error message and 7-zip reports data errors in the cab file...

I had to use a South Korean DNS server to get around that! The US DNS servers are pretty much poisoned...
RJARPCGP
 

Re: wsusscn2.cab signature verification failure

Postby aker » 12.11.2016, 01:22

Google-DNS (8.8.8.8/8.8.4.4) works fine here
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker


WSUS Offline Update „Community Edition“ 12.3.1 / 11.9.6esr
https://gitlab.com/wsusoffline
aker
 
Posts: 3683
Joined: 02.03.2011, 15:32

Re: wsusscn2.cab signature verification failure

Postby RJARPCGP » 12.11.2016, 02:07

aker wrote:Google-DNS (8.8.8.8/8.8.4.4) works fine here


8.8.8.8. was a fail when I tried it... :( I want Microsoft to revoke their mirroring!
RJARPCGP
 

PreviousNext

Return to Download

Who is online

Users browsing this forum: Google [Bot] and 17 guests