Jump to content
ricktendo

[Repak] KB931125 Windows Root Certificate (March)

Recommended Posts

This repackage is KB931125 a.k.a. Windows Root Certificate, I repacked to removed the following files:

 

ADVPACK.DLLW95INF16.DLLW95INF32.DLL

Root Update Package (intended for Windows XP only)

For users who are running Windows XP, the root update package will update the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program. The file is updated periodically to add or remove root certificates or CAs from distribution by the Program.

Download: http://adf.ly/1713566/rootsupd

MD5: f19d04f06d1dfc626e7d4539244fd8f6

Size: 387 KB

Share this post


Link to post
Share on other sites

I've looked inside the package but I'm still unsure, and a little confused about this repak. Does [Repak] KB931125 Windows Root Certificate include [Repak] KB2728973 Revoked Root Certificate, or is it the other way around or neither?

I'm considering integrating these into my Windows 7 SP1 x64 WIM, however I would like to be clear if I need to integrate just KB931125 or both to be Up2Date, any insight would be much appreciated.

EDIT :: Never mind, I got it sorted out. Thanks for this addon. For anyone else who might be wondering KB931125 (rootsupd.exe) is XP only.

Edited by dotfusion

Share this post


Link to post
Share on other sites

Question: you had somewhere (probably at ryanvm, I can't remember) a single installer with both updated roots and also revoked roots combined. It was great for xp + nlite... can you please make an updated installer for it and post it in the first post? Thanks :)

Share this post


Link to post
Share on other sites

Updated

 

Hi @Rick,

Can we use this addon in Win7-x86 or x64? And how to use this file in WinToolKit? (switch etc...)

Edited by oguz

Share this post


Link to post
Share on other sites

Correct, the kb article mentions this
 

Windows Vista and Windows 7
Root certificates on Windows Vista and later versions are distributed through the automatic root update mechanism. That is, they are distributed through the root certificate. When a user goes to a secure website (by using HTTPS SSL), reads a secure email message (S/MIME), or downloads an ActiveX control that is signed (code signing), and then encounters a new root certificate, the Windows certificate chain verification software checks Microsoft Update for the root certificate. If the software finds the root certificate, the software downloads the current Certificate Trust List (CTL). The CTL contains the list of all trusted root certificates in the program and verifies that the root certificate is listed there. Then, it downloads the specified root certificate to the system and installs the certificate in the Windows Trusted Root Certification Authorities Store. If the root certificate is not found, the certificate chain is not completed, and the system returns an error.
To the user, a successful root update is seamless. The user does not see any security dialog boxes or warnings. The download happens automatically. In addition, for Windows Vista and later versions, client SKUs support weekly pre-fetching from Microsoft Update to check for updated root certificate properties (for example, extended validation (EV), code signing, or server authentication properties [that is, certificate properties that are added to a root certificate]).
For detailed technical information about how Windows updates root certificates in Windows Vista and in later versions, go to the following website:
http://technet.microsoft.com/en-us/library/cc749331(WS.10).aspx

 

Now and then Microsoft will mess up (or there is a compromised cert), they will offer it or the revoked certs to Widows 7 users via windows update

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Similar Content

    • By ricktendo
      Microsoft DirectX end-user Redistributable (June 2010)
      Version: 9.29.1974
      Supported operating systems: Windows 8, Windows 7, Windows Vista, Windows Server 2012/2008+R2/2003 SP1+, Windows XP SP2+
      Website: http://www.microsoft.com/en-us/download/details.aspx?id=8109
       
       
      x86/x64: removed
      MD5: 2ef61d694dbcb3b3d0f47f1bbc0ca831
      Size: 90.7 MB
      x86: removed
      MD5: 0f51f57cff0bf51aa368f90da1c8b525
      Size: 42.8
    • By mooms
      This is a script to repack JRE (Java Runtimes) setups into a silent 7zip SFX installer.


      Beta version for Java 9/10:
      JAVA-Multi_Maker_4.0b4.zip
      MD5: 203c7e514414c932ff847d3d8dac5fa4
      SHA-1: 93fc856e026fc42298ebc8e76bba338f21c1704a
      Size: 800KB

      How to use:
      You have to download the Java 9/10 setup(s) from here (x64)  | mirror x64 | mirror x64 | mirror x86 .
      - Extract the archive in a work folder with no space in the path.
      - Copy the setup(s) in the "JRE_setups" folder
      - Launch "_JAVA_Multi_Maker.cmd".

      Download function may return when Java 9 will be on the official download page.

      Available switches:
      No switch (dafault) - Silent install without Web plugins. Remove any previous Java version(s).
      -ai   - Silent install with Web plugins. Remove any previous Java version(s).
      -ai1  - Silent install without Web plugins. Remove only previous Java 9 version(s).
      -ai2   - Silent install with Web plugins. Remove only previous Java 9 version(s).

      Tested on Windows 7 & 10 x64, everything works as intended.
      Please test and report how it works for you.


       ------------------------------------
       
      Current version (for Java 8u73 and newer) (could work on XP if you use a custom build of aria2)
      JAVA-Multi_Maker_3.5.zip
      MD5: 7716dddd8c576f0d002e6ddeb43d1ac6
      SHA-1: 495cf642bf73571bca97179e63ab28c88ca2f5f1
      Size: 3.79 MB
       
       How to use:
      - Extract the archive in a work folder with no space in the path.
      - Run the batch file.
      - Choose the version you want to use
      The script will download the newest JRE automatically. If there is a problem with the download (or if you don't have access to Internet), you can also put the desired version(s) in the script's folder, it will always use the greater version found in the folder.

      Notes:
      - To avoid errors, the SFX will uninstall any previous Java version(s) newer than JRE 6.0 Update 22 before installing the new one(s).
      nLite/RVMi Addons are no longer created
      - It's highly recommended to NOT install Java web plugins, they are plagued with many vulnerabilities, but using Java locally is rather safe.
      - You can use the uninstall tool for Java to remove (very) old versions.
       

      Available switches:
      GUI version:
      -ai   - Silent install with Web plugins
      -ai1 - Silent install without Web plugins
       
      noGUI version:
      no switch - Silent install without Web plugins
      -ai            - Silent install with Web plugins
       
       
       ------------------------------------

      Old version (for Java 8u20 up to 8u72) (works on XP)
      JAVA-Multi_Maker_3.0.zip
      MD5: d89eec93311acedd842c6378ed630734
      Size: 1.29 MB
       
       ------------------------------------


      Old version (for Java 6, 7 and 8 before 8u20)
      JAVA-Multi_Maker_1.3a.zip
      MD5: 8d592f99c2b25e2c4404203af0b4d082
      Size: 373 KB
      How to use:
      - Extract the archive in a work folder with no space in the path.
      - Download the x86 and/or x64 Offline setup of Java 6/7/8 and put it in the same folder.
      - Run the batch file.
      The maker will perform an admin install of Java and repack them inside a 7zip SFX.
       
      Notes:
      - The install is passive by default, use a switch if you want silent install.
      - To avoid errors, the SFX will uninstall any previous Java version(s) newer than JRE 6.0 Update 22 before installing the new one(s).
      - Update check and Java quick starter are disabled (JQS doesn't exist in x64 anyway).
      - It's highly recommended to NOT install Java web plugins, they are plagued with many vulnerabilities, but using Java locally is rather safe.
      - You can use the uninstall tool for Java to remove (very) old versions.
       
      Available switches:
      -ai   - Silent install with Web plugins
      -ai1 - Silent install without Web plugins
    • By niTe_RiDeR_Pr0
      SumatraPDF v3.2.10638 (Pre-Release) PDF Reader - Dual x86/x64 2-in-1 RePack
      About RePack (info):
      RePacks made by extracting the individual x86 & x64 installers available here & repacking them into an Inno setup. Nothing extra is added. Added choice to associate SumatraPDF with various file formats. Optional Command-Line Switches:
      File Details:
      File Name: SumatraPDF_3.2.10638.Dual_RePack.exe
      File Name: 6.17 MB
      MD5 Hash: C629DD40ACC6613BAB5B6F7FACE99AC4
      Screenshots are the top of the thread
    • By niTe_RiDeR_Pr0
      VidCoder v2.51 - Dual x86/x64 - 2-in-1 Compressed RePack
      About RePack (info):
      Multilanguage Installer. Installs 32/64bit version according to system architecture automatically. VidCoder requires .NET Framework 4.0. This RePack checks if .NET Framework 4.0 is installed in the system, and if it is not found, then it prompts the user to download and install automatically (within the installer). Compressed installer size from 24MB (size of 32+64bit installer) to 17MB. Optional Command-Line Switches:
      File Details:
      File Name: VidCoder_2.51_x86-x64_RePack.exe
      File Name: 17.9 MB
      MD5 Hash: 50D3F051BC2B7CA1E1C53448F523E02C
      Screenshots are at the top of this thread
    • By niTe_RiDeR_Pr0
      IrfanView v4.4.4 - x86/x64 + Plugins + Toolbars + Languages - 5-in-1 RePack
      About RePack (info):
      Multilanguage installer.   Installer contains: IrfanView-x86 files, IrfanView-x64 files, all plugins, all languages & 21 toolbar skins. Added IrfanPaint 3rd party plugin and Shell Extensions Installer installs x86/x64 version according to your Windows architecture. Optional Command-Line Switches:
       
      File Details:
      File Name: IrfanView_4.4.4.Dual_RePack.exe
      File Name: 30.2 MB
      MD5 Hash: B6D1ACB40002CCB6ACF5D115A92D14EC
      Screenshots are at the top of this thread
×
×
  • Create New...