[Bug 21893] New: ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Summary: ie7 setup fails to install with Cryptographic Service
                    error
           Product: Wine
           Version: 1.1.39
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wintrust
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Running `sh winetricks ie7` results in an error after cabextract stating "Setup
could not verify the integrity of the files needed for installation. Make sure
the Cryptograp" (continues: 'hic service is running on this computer').

A bisect between 1.1.34 and 1.1.39 results in the isolation of the following
patch.

428fc17934017dfda2ceff0c1143c8379c10be00 is first bad commit
commit 428fc17934017dfda2ceff0c1143c8379c10be00
Author: Juan Lang 
Date:   Wed Jan 27 14:20:26 2010 -0800

wintrust: Return error directly from WINTRUST_CreateChainForSigner.

:040000 040000 efcc8e880dabb7455877697f675988dfc353b351
362ad6dc90caf4311e3de2b4ef9bc2b22955582c M    dlls

Previous to this patch ie7 installer GUI spawns and continues without error.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Jeff Zaroyko  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download, regression
                 CC|                            |[e-mail]

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #1 from Juan Lang   2010-02-28 17:47:09 ---
Please attach a +wintrust log.  Also, do you have a download URL for IE7?

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

James McKenzie  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #2 from James McKenzie   2010-02-28 18:49:04 ---
Confirm that this error also occurs with Friday's git 1.1.39 and on MacOSX
10.5.8

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |Installer
                URL|                            |http://download.microsoft.c
                   |                            |om/download/3/8/8/38889DC1-
                   |                            |848C-4BF2-8335-86C573AD86D9
                   |                            |/IE7-WindowsXP-x86-enu.exe
                 CC|                            |[e-mail]

--- Comment #3 from Austin English   2010-02-28 18:57:27 ---
> From winetricks:

http://download.microsoft.com/download/3/8/8/38889DC1-848C-4BF2-8335-86C573A...

sha1sum d39b89c360fbaa9706b5181ae4718100687a5326

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #4 from edward savage   2010-02-28 19:00:38 ---
Created an attachment (id=26544)
 --> (http://bugs.winehq.org/attachment.cgi?id=26544)
wintrust debug log

(In reply to comment #1)
> Please attach a +wintrust log.  Also, do you have a download URL for IE7?

I have been using the ie7 installer downloaded by winetricks to the
.winetrickscache directory.  `sh winetricks ie7`

I just recompiled 1.1.39 sans this patch and ie7 installs without issue.

Interestingly the removal of this commit also fixes a regression in Google Talk
that crashed the application after launch stopping people being able to use the
program at all.  When I have time later today I'll write up the crash condition
for gTalk as well and attach to this bug.

Google talk can be downloaded from here:
http://dl.google.com/googletalk/googletalk-setup.exe

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #5 from Juan Lang   2010-02-28 19:49:00 ---
Does this patch help?
http://bugs2.winehq.org/attachment.cgi?id=24914

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #6 from edward savage   2010-02-28 22:19:00 ---
(In reply to comment #5)
> Does this patch help?
> http://bugs2.winehq.org/attachment.cgi?id=24914

The patch does not fix the issue.  Do you require some alternative debug logs?

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #7 from Juan Lang   2010-02-28 22:39:54 ---
Yes, a +wintrust,+crypt log would be helpful.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

A Wine user  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1

--- Comment #8 from A Wine user   2010-03-01 00:21:14 ---
*** This bug has been confirmed by popular vote. ***

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #9 from edward savage   2010-03-01 07:34:32 ---
Created an attachment (id=26561)
 --> (http://bugs.winehq.org/attachment.cgi?id=26561)
+wintrust +crypt debug log (22mb uncompressed)

(In reply to comment #7)
> Yes, a +wintrust,+crypt log would be helpful.

Hope this helps.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #10 from Juan Lang   2010-03-01 10:57:44 ---
Created an attachment (id=26564)
 --> (http://bugs.winehq.org/attachment.cgi?id=26564)
Patch: Correct GenericChainCertificateTrust's handling of
WINTRUST_CreateChainForSigner's return value

Does this patch help?

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #11 from [e-mail]  2010-03-02 04:23:09 ---
your patch fixes the installer Problem. Installation does now work fine.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #12 from edward savage   2010-03-02 05:17:43 ---
(In reply to comment #10)
> Created an attachment (id=26564)

--> (http://bugs.winehq.org/attachment.cgi?id=26564) [details]
> Patch: Correct GenericChainCertificateTrust's handling of
> WINTRUST_CreateChainForSigner's return value
>
> Does this patch help?

Yes, this patch applied to git from today allows me to install ie7 from
winetricks.

I had to create a new .wine directory as installing in to my existing one
created wintrust/crypt errors.  I assume this is unimportant as people can
install by reverting the old patch for existing installs and this fixes it for
new installs.

Thanks!

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

--- Comment #13 from Juan Lang   2010-03-02 11:11:20 ---
(In reply to comment #12)
> I had to create a new .wine directory as installing in to my existing one
> created wintrust/crypt errors.  I assume this is unimportant as people can
> install by reverting the old patch for existing installs and this fixes it for
> new installs.

By "wintrust/crypt errors", do you mean further errors in this or other
applications?  Or do you mean test failures?  If it's the former, hopefully
they're the result of broken installs due to a broken wintrust.dll, and most
people won't be affected.  Please keep an eye out for similar errors, and open
another bug if they're repeatable.  If they're test failures, please attach the
output of make test here, as I don't see failures on my end.

Thanks for the report!

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |patch

--- Comment #14 from Juan Lang   2010-03-02 11:12:27 ---
Oh, and I sent the patch in:
http://www.winehq.org/pipermail/wine-patches/2010-March/085416.html

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #15 from Juan Lang   2010-03-03 11:21:09 ---
(Should be) fixed by commit 2f836649816764cd8f4af5779baec6561d430e00.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #16 from Alexandre Julliard   2010-03-05 12:43:36 ---
Closing bugs fixed in 1.1.40.

[Bug 21893] ie7 setup fails to install with Cryptographic Service error

http://bugs.winehq.org/show_bug.cgi?id=21893

Gitesh Dang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]