A critical Windows component expires in 25 hours

Re:A critical Windows component expires in 25 hours by Retr0spectrum on Tuesday September 22, 2015 @04:31PM (#10261497)

Can anyone else confirm this?

[ Parent | on HN ]

Re:A critical Windows component expires in 25 hours by AaronFriel on Tuesday September 22, 2015 @04:35PM (#10261525)

I have no idea of potential impact, but the command run on an up-to-date Windows 10 system reports:

    > certutil -verifyCTL disallowed
    LastSyncTime = "9/22/2015 9:33 AM"
    [DisallowedCTL]
    ListIdentifier = "DisallowedCert_AutoUpdate_1"
    SequenceNumber = 01d065c00c3f1258
    ThisUpdate = "3/23/2015 6:21 PM"
    NextUpdate = EMPTY
    SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash"
    SignerExpiration = "9/23/2015 3:36 PM", "1.0 Days"
    WARNING = "SignerExpiration: Less than 180 Days"
    CTLEntries = 57
    The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst
    MissingCerts = 57

[ Parent | on HN ]

Re:A critical Windows component expires in 25 hours by shlorn on Tuesday September 22, 2015 @05:02PM (#10261694)

Can confirm, getting similar output on Windows 10.0.10240. Although url is working works in chrome. Could this be a bug in the certutil updater?

[ Parent | on HN ]

Re:A critical Windows component expires in 25 hours by orf on Tuesday September 22, 2015 @05:30PM (#10261840)

        (endpoint) C:\Users\orf
	λ certutil -verifyCTL disallowed | head
	LastSyncTime = "22/09/2015 18:24"
	[DisallowedCTL]
	ListIdentifier = "DisallowedCert_AutoUpdate_1"
	SequenceNumber = 01d065c00c3f1258
	ThisUpdate = "24/03/2015 00:21"
	NextUpdate = EMPTY
	SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash"
	SignerExpiration = "23/09/2015 21:36", "1.0 Days"
	WARNING = "SignerExpiration: Less than 180 Days"
	CTLEntries = 57

Then a whole load of entries like:

        [f69d22ae1ed615b1b9e390e310bbbb31]
	CertId = 1.3.6.1.4.1.311.10.11.0
	Subject = "MISSING_CERTIFICATE"

[ Parent | on HN ]

Re:A critical Windows component expires in 25 hours by maaarghk on Tuesday September 22, 2015 @04:34PM (#10261519)

well, running the command gives this:

    Microsoft Windows [Version 10.0.10240]
    (c) 2015 Microsoft Corporation. All rights reserved.
    
    C:\WINDOWS\system32>certutil -verifyCTL disallowed
    LastSyncTime = "22/09/2015 13:53"
    [DisallowedCTL]
    ListIdentifier = "DisallowedCert_AutoUpdate_1"
    SequenceNumber = 01d065c00c3f1258
    ThisUpdate = "24/03/2015 00:21"
    NextUpdate = EMPTY
    SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash"
    SignerExpiration = "23/09/2015 21:36", "1.0 Days"
    WARNING = "SignerExpiration: Less than 180 Days"
    CTLEntries = 57
    The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst
    MissingCerts = 57

but I know nothing about the implications. It also looks like the file has the possibility to be downloaded from msft on the fly?

[ Parent | on HN ]

Re:A critical Windows component expires in 25 hours by GaryGapinski on Wednesday September 23, 2015 @04:22AM (#10263881)

As of a short while ago (times are US/Eastern):

  C:\Users\gapinski>certutil -verifyCTL disallowed|more
  LastSyncTime = "9/23/2015 3:33 AM"
  [DisallowedCTL]
  ListIdentifier = "DisallowedCert_AutoUpdate_1"
  SequenceNumber = 01d0f584a9ad12f7
  ThisUpdate = "9/22/2015 6:18 PM"
  NextUpdate = EMPTY
  SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash"
  SignerExpiration = "8/14/2016 1:13 PM", "326.4 Days"
  CTLEntries = 57
…

[ Parent | on HN ]