[Bug 9929] New: Unimplemented function call in Internet Explorer 7 installer
http://bugs.winehq.org/show_bug.cgi?id=9929 Summary: Unimplemented function call in Internet Explorer 7 installer Product: Wine Version: 0.9.46. Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-crypt32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: nodisgod(a)yahoo.com Created an attachment (id=8428) --> (http://bugs.winehq.org/attachment.cgi?id=8428) Wine output After using winetricks volnum as per Bug #5351, I started the IE7 installer binary for Windows XP SP2. After extraction, the installer page faults with "Call from 0x7b843f50 to unimplemented function wintrust.dll.GenericChainFi nalProv, aborting" and another message for wintrust.dll.HTTPSCertificateTrust. I tried to use a native wintrust.dll and also tried changing Windows version to Windows XP, with same results. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 scguy318 <nodisgod(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #8428|application/octet-stream |text/plain mime type| | -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |juan_lang(a)yahoo.com --- Comment #1 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-07 17:26:56 --- Is there a download URL for that? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #2 from scguy318 <nodisgod(a)yahoo.com> 2007-10-07 18:28:10 --- (In reply to comment #1)
Is there a download URL for that?
Right here: http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-... -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #3 from scguy318 <nodisgod(a)yahoo.com> 2007-10-07 18:34:48 --- And if you were asking about winetricks, the URL to the script is here: http://www.kegel.com/wine/winetricks -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |http://www.microsoft.com/dow | |nloads/details.aspx?FamilyId | |=9AE91EBE-3385-447C-8A30- | |081805B2F90B&displaylang=en Keywords| |download, Installer -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Ever Confirmed|0 |1 --- Comment #4 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-08 17:51:53 --- I've taken a quick look at this, and I won't have a quick fix for it. I'll send some patches that remove the crash, but the install will still fail. The reason is: 1. The Microsoft root certificates aren't trusted, that is, they're not likely to be in the CA root certificate list installed on your system. 2. Hacking around this (implementing a stub GenericChainCertificateTrust that just returns S_OK, for instance) leads to CertVerifyCertificateChainPolicy failing, due to the CERT_CHAIN_POLICY_MICROSOFT_ROOT policy not being implemented. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #5 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-09 15:06:52 --- Created an attachment (id=8481) --> (http://bugs.winehq.org/attachment.cgi?id=8481) Error dialog With today's git, this error dialog appears. A snipped from a +crypt,+wintrust log shows the root of the problem: trace:wintrust:GenericChainFinalProv (0x11ec88) trace:crypt:CertVerifyCertificateChainPolicy (#0001, 0xa893a0, 0x33f9c4, 0x33f9b0) trace:wintrust:GenericChainFinalProv returning 1 (800b0109) trace:wintrust:WINTRUST_DefaultVerify returning 00000001 trace:wintrust:WinVerifyTrust returning 00000001 800b0109 is CERT_E_UNTRUSTEDROOT, because the Microsoft root certificates aren't installed on my system. It may be possible to work around the problem by downloading the Microsoft root certificates from somewhere (I don't know where) and installing them as trusted CA certs on the local system. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Unimplemented function call |Internet Explorer 7 |in Internet Explorer 7 |installer complains it |installer |cannot verify integrity of | |installation files, quits --- Comment #6 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-09 15:08:07 --- Updating summary to match error -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #7 from scguy318 <nodisgod(a)yahoo.com> 2007-10-09 20:06:42 --- Created an attachment (id=8485) --> (http://bugs.winehq.org/attachment.cgi?id=8485) Microsoft root certificates I believe I've exported the Microsoft certificates from a Windows XP SP2 machine. Are these certs of any interest, and how does one import a certificate anyway? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #8 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-09 23:41:18 --- They'll work (but note this just gets you to the next problem.) To use them: You'll need to encode them as PEM files (basically base64 encoded), and put them into wherever your root certs are installed. On Debian-ish systems, that's /etc/ssl/certs/ca-certificates.crt . On SUSE, it's /etc/ssl/certs . On Fedora/Redhat, it's /etc/pki/tls/certs/ca-bundle.crt . I don't know about other distros. So, something like: openssl x509 -inform DER -outform PEM < rootauthority.cer > rootauthority.pem does it for rootauthority.cer. You can figure out how to repeat that for the other two (I don't know offhand which ones are strictly needed.) If you have one of the .crt files on your system, you'll want to append the resulting .pem files to that. Otherwise, you can just copy the .pem files to the appropriate directory. Unfortunately, once you do that, you'll get the following error, as I noted before: fixme:CertVerifyCertificateChainPolicy unimplemeneted for 7 Hacking chain.c to return TRUE for this case doesn't get any further, and I don't know what the problem is, frankly. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #9 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-15 15:13:12 --- Update: I've implemented the MS chain policy, and verified that it produces the same values as on Windows when the MS root certs are installed as described here. The installer still doesn't get any further. A +relay,+snoop log doesn't tell me what the installer's doing after calling CertVerifyCertificateChainPolicy that might cause it to fail, so I'm stumped. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |focht(a)gmx.net --- Comment #10 from Anastasius Focht <focht(a)gmx.net> 2007-10-16 10:16:05 --- Hello, if you use/fake CertVerifyCertificateChainPolicy() be sure to have CERT_CHAIN_POLICY_STATUS [out param] return correct values too. pPolicyStatus->dwError = 0; Should keep it happy ;-) Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #11 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-16 10:39:36 --- Odd, I don't see that with today's git. You're right that pPolicyStatus->dwError is potentially uninitialized, so I'll send a fix for that, but correcting it doesn't get it to work for me. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #12 from Anastasius Focht <focht(a)gmx.net> 2007-10-16 10:49:38 --- Hello, --- quote --- You're right that pPolicyStatus->dwError is potentially uninitialized, so I'll send a fix for that, but correcting it doesn't get it to work for me. --- quote --- Can you post +tid,+seh,+wintrust,+crypt,+relay with pPolicyStatus->dwError correctly initialized applied? E.g. the whole WinVerifyTrust(), CertVerifyCertificateChainPolicy(), ... MessageBox( "error blah") sequence Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #13 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-16 11:15:35 --- Created an attachment (id=8612) --> (http://bugs.winehq.org/attachment.cgi?id=8612) Snippet of output This is from a +crypt,+wintrust,+tid,+seh,+relay log, with today's git + the "Always set pPolicyStatus->dwError" + a patch that adds a couple FIXMEs to show me what it's up to. It starts with the certificate chain being successfully created, and ends with the error message beginning to be created. I trimmed it to avoid spamming bugzilla with a large log if it isn't needed, but I'll post the complete log if you like. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #14 from Anastasius Focht <focht(a)gmx.net> 2007-10-16 13:04:33 --- Hello, yes, that problem a bit hard to spot because it does not stop at error. The installer actually verifies a list of files and stores the cert check results in a counter. By debugging the crap out of that installer, I was able to identify the failing one ;-) Armed with that knowledge, one can go back in rather long trace log and find the following offender: --- snip --- .. 0036:trace:wintrust:WinVerifyTrust (0xffffffff, {fc451c16-ac75-11d1-b4b8-00c04fb66ea0}, 0x33fb64) 0036:trace:wintrust:dump_wintrust_data 0x33fb64 0036:trace:wintrust:dump_wintrust_data cbStruct: 48 0036:trace:wintrust:dump_wintrust_data pPolicyCallbackData: (nil) 0036:trace:wintrust:dump_wintrust_data pSIPClientData: (nil) 0036:trace:wintrust:dump_wintrust_data dwUIChoice: 2 0036:trace:wintrust:dump_wintrust_data fdwRevocationChecks: 00000001 0036:trace:wintrust:dump_wintrust_data dwUnionChoice: 1 0036:trace:wintrust:dump_file_info 0x33fb54 0036:trace:wintrust:dump_file_info cbStruct: 16 0036:trace:wintrust:dump_file_info pcwszFilePath: L"C:\\temp\\74160442a7e9354b1a648c3d13\\update\\ie7.cat" 0036:trace:wintrust:dump_file_info hFile: (nil) 0036:trace:wintrust:dump_file_info pgKnownSubject: (null) 0036:trace:wintrust:dump_wintrust_data dwStateAction: 1 0036:trace:wintrust:dump_wintrust_data hWVTStateData: (nil) 0036:trace:wintrust:dump_wintrust_data pwszURLReference: (null) 0036:trace:wintrust:dump_wintrust_data dwProvFlags: 00000140 0036:trace:wintrust:dump_wintrust_data dwUIContext: 1 0036:trace:wintrust:WINTRUST_DefaultVerify (0xffffffff, {fc451c16-ac75-11d1-b4b8-00c04fb66ea0}, 0x33fb64) 0036:trace:wintrust:WintrustLoadFunctionPointers ({fc451c16-ac75-11d1-b4b8-00c04fb66ea0} 0x12dae8) 0036:trace:wintrust:WintrustGetRegPolicyFlags 0x137758 0036:trace:wintrust:SoftpubInitialize (0x137738) 0036:trace:wintrust:SoftpubInitialize returning 00000000 0036:trace:wintrust:SoftpubLoadMessage (0x137738) 0036:trace:wintrust:SOFTPUB_OpenFile returning 1 0036:trace:wintrust:SOFTPUB_GetFileSubject returning 0 0036:trace:wintrust:SoftpubLoadMessage returning 1 (800b0003) 0036:trace:wintrust:WINTRUST_DefaultVerify returning 00000001 0036:trace:wintrust:WinVerifyTrust returning 00000001 .. --- snip --- "ie7.cat" is the failing one -> 0x800b0003 -> TRUST_E_SUBJECT_FORM_UNKNOWN All other files are successfully verified. And of course - pPolicyStatus->dwError - is really checked ;-) Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #15 from Juan Lang <juan_lang(a)yahoo.com> 2007-10-16 13:23:41 --- Ah, thanks. I was hoping I'd get your help on this one, but I should have been able to spot that one myself. So this is another one that fails due to lack of .cat support. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|crypt32 |wintrust --- Comment #16 from Juan Lang <juan_lang(a)yahoo.com> 2008-02-14 15:46:01 --- This one's in wintrust, moving component. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #17 from scguy318 <nodisgod(a)yahoo.com> 2008-04-03 02:54:00 --- This problem also affects the Windows Installer 3.1 redist, obtainable from (http://www.microsoft.com/downloads/details.aspx?FamilyID=889482fc-5f56-4a38-...). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #18 from scguy318 <nodisgod(a)yahoo.com> 2008-04-03 03:19:45 --- Disregard previous, the latter issue is covered in bug 10698. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #19 from Anastasius Focht <focht(a)gmx.net> 2008-07-14 18:11:57 --- Hello, with commit e459ac84ee8caecd25f5c6027e17c917d412f5fe, M$ root certificates are now "builtin", which is a good thing (tm). Juan, are there any plans on continuing the work on this issue (timeline)? If you need hints how to detect/verify .cat signatures just ask. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #20 from Juan Lang <juan_lang(a)yahoo.com> 2008-07-14 18:16:06 --- (In reply to comment #19)
Juan, are there any plans on continuing the work on this issue (timeline)? If you need hints how to detect/verify .cat signatures just ask.
I'm not actively working on it. I don't think decoding .cat files will be that hard, just the usual boring asn.1 stuff. I haven't looked into it beyond that. Hints are always welcome, in case I find some time ;-) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Michał Majchrowicz <mmajchrowicz(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mmajchrowicz(a)gmail.com -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Maarten Lankhorst <m.b.lankhorst(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m.b.lankhorst(a)gmail.com Depends on| |6194 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 --- Comment #21 from Juan Lang <juan_lang(a)yahoo.com> 2008-10-08 11:22:49 --- Patches sent: http://www.winehq.org/pipermail/wine-patches/2008-October/062747.html http://www.winehq.org/pipermail/wine-patches/2008-October/062748.html http://www.winehq.org/pipermail/wine-patches/2008-October/062749.html -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #22 from Juan Lang <juan_lang(a)yahoo.com> 2008-10-09 10:22:14 --- This is now fixed. IE7 still doesn't install, but this happens well after the .cat file is verified, so I think a new bug should be opened for that. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Alexandre Julliard <julliard(a)winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #23 from Alexandre Julliard <julliard(a)winehq.org> 2008-10-10 10:08:54 --- Closing bugs fixed in 1.1.6. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=9929 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |04841e1f355c93091518ff62a2c | |1e96aa8604b97 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=9929 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.microsoft.com/do |https://web.archive.org/web |wnloads/details.aspx?Family |/20061105050627/http://down |Id=9AE91EBE-3385-447C-8A30- |load.microsoft.com/download |081805B2F90B&displaylang=en |/3/8/8/38889dc1-848c-4bf2-8 | |335-86c573ad86d9/IE7-Window | |sXP-x86-enu.exe -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
wine-bugs＠winehq.org -
WineHQ Bugzilla