[Bug 26527] New: The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

Summary: The Witcher registration doesn't work
           Product: Wine
           Version: 1.3.16
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wininet
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Created an attachment (id=33787)
 --> (http://bugs.winehq.org/attachment.cgi?id=33787)
+wininet,+chain log

The Witcher (1.0 CZ DVD) online registration doesn't work. I can insert my
account data, however there is an error dialog with "InternetException,12037"
when I click send. 
Winetricks wininet works around this.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|wininet                     |crypt32

--- Comment #1 from Juan Lang  2011-03-24 11:01:05 CDT ---
It appears you're running afoul of this check:
warn:chain:CRYPT_KeyUsageValid no key usage extension on a CA cert

I believe you can fix it by modifying crypt32's chain.c:  in
CRYPT_KeyUsageValid, modify the if (!ext) branch before the big comment about
MS violating RFC 5280, section 4.2.1.3 to just return TRUE.

Could you let me know if that works for you?

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #2 from Pavel Ondracka  2011-03-24 13:47:29 CDT ---
Created an attachment (id=33804)
 --> (http://bugs.winehq.org/attachment.cgi?id=33804)
+wininet,+chain log obtained with modified chain.c

(In reply to comment #1)
> It appears you're running afoul of this check:
> warn:chain:CRYPT_KeyUsageValid no key usage extension on a CA cert
>
> I believe you can fix it by modifying crypt32's chain.c:  in
> CRYPT_KeyUsageValid, modify the if (!ext) branch before the big comment about
> MS violating RFC 5280, section 4.2.1.3 to just return TRUE.
>
> Could you let me know if that works for you?

It still doesn't work, attaching new log.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #3 from Juan Lang  2011-03-26 11:55:41 CDT ---
Thanks.  Could you attach a +cryptnet log with the modified chain.c?

Also, could you attach a +crypt,+chain log with native wininet?

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #4 from Pavel Ondracka  2011-03-28 15:12:22 CDT ---
Created an attachment (id=33844)
 --> (http://bugs.winehq.org/attachment.cgi?id=33844)
+cryptnet log with modified chain.c

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #5 from Pavel Ondracka  2011-03-28 15:19:27 CDT ---
Created an attachment (id=33845)
 --> (http://bugs.winehq.org/attachment.cgi?id=33845)
+crypt,+chain log with native wininet

For some reason there are no chain traces with native wininet although
WINEDEBUG=+crypt,+chain was set. I don't know if I messed up something, however
I can't easily try again, I need to reinstall the game and it takes ages here.
It those logs are not sufficient let me know.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #6 from Juan Lang  2011-04-04 10:55:51 CDT ---
(In reply to comment #5)
> For some reason there are no chain traces with native wininet although
> WINEDEBUG=+crypt,+chain was set. I don't know if I messed up something

You didn't mess anything up.  It succeeds without anything in the chain log
because it doesn't call crypt32 directly.  Instead it calls:

fixme:wintrust:HTTPSCertificateTrust (0x14adc0)

but that's a stub which returns S_OK.  In other words, it always accepts any
certificate.  (It probably shouldn't.)

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #7 from Juan Lang  2011-04-04 10:59:37 CDT ---
Have you tried on Windows lately?  When I connect to
https://secure.thewitcher.com/registration with Chrome, it fails because the
certificate is expired.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #8 from Pavel Ondracka  2011-04-04 13:58:05 CDT ---
(In reply to comment #7)
> Have you tried on Windows lately?  When I connect to
> https://secure.thewitcher.com/registration with Chrome, it fails because the
> certificate is expired.

Yes I have tried, The Witcher registration works both with native wininet and
with Windows XP SP3.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

fracting  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #9 from fracting  2011-04-05 02:43:31 CDT ---
Add me to the cc list.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #10 from Austin English  2011-04-05 13:16:36 CDT ---
Should be fixed by
http://source.winehq.org/git/wine.git/commitdiff/7871a9f85880e3bbe74d6b9ed61...

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #11 from Juan Lang  2011-04-05 13:28:19 CDT ---
(In reply to comment #10)
> Should be fixed by
> http://source.winehq.org/git/wine.git/commitdiff/7871a9f85880e3bbe74d6b9ed61...

No, that fixes one error, but it doesn't fix the one about revocation checking
failing.  I don't know how to fix that yet, especially since I don't know how
to reproduce here.

Is there a demo I could use to reproduce it?

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #12 from Pavel Ondracka  2011-04-05 13:58:07 CDT ---
(In reply to comment #11)
> (In reply to comment #10)
> > Should be fixed by
> > http://source.winehq.org/git/wine.git/commitdiff/7871a9f85880e3bbe74d6b9ed61...
>
> No, that fixes one error, but it doesn't fix the one about revocation checking
> failing.  I don't know how to fix that yet, especially since I don't know how
> to reproduce here.
>
> Is there a demo I could use to reproduce it?

Yes, there is a demo available, just google for "The Witcher demo", however I
doubt it uses any kind of registration, because you are asked for your unique
Witcher CD key during registration.

Sigh, so much trouble :-( The main Witcher problem is DRM (bug 10264), to get
rid of it you need to patch the Witcher, however patch 1.4 checks for
registration and even when The Witcher is registered (with native wininet), the
check (online) still fails (bug 26538) probably also with some network or
whatever issues.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #13 from [e-mail] 2011-04-06 06:38:06 CDT ---
My Post from "The witcher Forum"

Hi again & once more I'll explain the still existing problem

I'm on a Ubuntu 10.10 machine

please beleave I've read everything about any possible throu the whole internet
& found no solution.

On
http://www.thewitcher.com.nyud.net:8080/forum/index.php?topic=17503.0http://...

I found a few points

...A2: "The Witcher" runs pretty well with WINE under Linux, and since patch
1.4 ( for the original owners ) and patch 1.5 ( for the Enhanced users ) you
don't need any hacks as the TAGES disk protection was removed and the DVD disk
is not needed to play the game.

I know theat becaus I ran The Witcher on an Mint 6 machine nearly 2 years ago &
it worked fine...
anyway I need to upgrade my system because of some different reasons...

first of all i disabled the firewall
...

How do i install the Directors Cut Patch?

A: You need the US version of the game, as this patch is ONLY for the US
version of the game, international users already have these patch features.
If you have the original game version ( released back in 2007 ):
install the game from the DVD
install the Enhanced Edition patch 1.4
Install patch 1.5
install the Directors Cut patch

THATS MINE... ->If you have the Enhanced Edition game version ( released back
in 2008 ):<-THATS MINE
install the game from the DVD
Install patch 1.5
install the Directors Cut patch

...TESTED FIRST & SECOND POSSIBUILLITY...

saying somthing like (free translated)...

„Patching isn't possible - The Witcher isn't fairly installed“

folder in the regedit.exe looks like this...

[HKEY_LOCAL_MACHINE\SOFTWARE\CD Projekt Red]

[HKEY_LOCAL_MACHINE\SOFTWARE\CD Projekt Red\The Witcher]
"InstallFolder"=“/home/YOUR_USER/.PlayOnLinux/wineprefix/THE_PREFIX_WHERE_THE_WITCHER_IS_IN/drive_c/Programme/The
Witcher“
"Language"="10"

[HKEY_LOCAL_MACHINE\SOFTWARE\CD Projekt Red\The Witcher\1.00.0000]

Running Register.exe alone will  bring up the following text.

„Internet>Exception, 12037“
that means...
ERROR_INTERNET_SEC_CERT_DATE_INVALID
12037
SSL certificate date that was received from the server is bad. The certificate
is expired

and this has nothing to do whith the 12057 problem you can find under upper
link

I removed/uninstalled and installed the whole thing incl. the registry entrys a
few times
now I'm realy totally out of ideas
for me there is still no possibuillity to run the witcher under ubuntu 10.10
and there is still no answer from the support, I contact a few days ago
please help!

Time & Date are set correctly
.NET Framework...
I can't install 3.0 ore 3.5 over wine into the right prefix but
v1.1.4322, v2.0.50727 & v4.0.30319 are installed
really should run whith that
by starting up the launcher.exe ore regestry.exe the associated windows open
normal
any kind of discripted problem starts after that
for example...
... the ie7.exe starts normal
... the Gw.exe starts normal

maybe somone over here has an idea
thanks anyway

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

Pavel Ondracka  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
                URL|                            |http://www.gamershell.com/d
                   |                            |ownload_22384.shtml

--- Comment #14 from Pavel Ondracka  2011-04-06 07:14:35 CDT ---
Seems the demo ( http://www.gamershell.com/download_22384.shtml ) might be
affected as well. It has slightly different behavior. It tries to connect when
starting the launcher (probably checking for updates or registration), where
the full version tries to connect only when the launcher register button is
clicked (demo has the register button inactive), but the output seems similar
so this should be the same bug. Juan do you need any logs with the demo, or
will you try yourself?

Demo output:
fixme:wininet:InternetSetOptionExW Flags 00000000 ignored
err:wininet:NETCON_secure_connect SSL_connect failed: 12037

with native wininet:
fixme:ras:RasEnumConnectionsA (0x630607a8,0x33954c,0x6305f610),stub!
fixme:ras:RasEnumConnectionsA RAS support is not implemented! Configure program
to use LAN connection/winsock instead!
fixme:urlmon:SecManagerImpl_ProcessUrlAction Unsupported arguments
fixme:crypt:CRYPT_RegControl CERT_STORE_CTRL_AUTO_RESYNC: stub
fixme:crypt:CRYPT_RegControl CERT_STORE_CTRL_AUTO_RESYNC: stub
fixme:secur32:schan_imp_create_session Using hardcoded "NORMAL" priority
fixme:wintrust:HTTPSCertificateTrust (0x13b780)
fixme:wintrust:HTTPSFinalProv (0x13b780)
fixme:urlmon:SecManagerImpl_ProcessUrlAction Unsupported arguments

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #15 from [e-mail] 2011-04-06 07:32:06 CDT ---
... something is crazy somehow...
& I dont know where to put this into... so I leave it here

maby WineHQ should correct some paths

Wine will install into:
 /home/YOUR_USER/.wine/drive_c/Programme(<-in german...)

PlayOnLinux will install into:
/home/YOUR_USER/.PlayOnLinux/wineprefix/IE7*/drive_c/Programme/...

Winetricks will install into:
/home/YOUR_USER/.cache/winetricks/ANY_PREFIX/drive_c/Programme/...
ore into "the default wineprefix":
/usr/share/.wine/ ANY_PREFIX/drive_c/Programme/...

* just for example EACH_PROGRAM_YOU_INSTALL_...INSTALL_A_/_IN
DIFFERENT_UNDERPREFIX
choose a program to install and this program-setup will build a new wineprefix
this means a new / another version of an windows
you cant install all the programs you want by an manuel installation
- where you can choose the prefix you want

Thats a problem when you'll try to set up a nearly perfect "windows" for
gaming...
including all the wanderful .dll's

for example
let PlayOnLinux install IE7
have made your "windows-setup"... your wineprefix called IE7... - putting all
the dll's you want...
you have...
/home/YourUser/.PlayOnLinux/wineprefix/IE7/drive_c/Programme/InternetExplorer/ie7.exe
restart PlayOnLinux
install Guildwars from game list
and you have...
/home/YourUser/.PlayOnLinux/wineprefix/GuildWars/drive_c/Programme/GuildWars/Gw.exe

than use wine to have different paths & more prefixes

than use winetricks to have more different paths & more different prefixes

can somebody please fix this?

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #16 from Pavel Ondracka  2011-04-06 07:39:03 CDT ---
(In reply to comment #15)
> ... something is crazy somehow...
> & I dont know where to put this into... so I leave it here
>
> maby WineHQ should correct some paths
>
> Wine will install into:
>  /home/YOUR_USER/.wine/drive_c/Programme(<-in german...)
>
> PlayOnLinux will install into:
> /home/YOUR_USER/.PlayOnLinux/wineprefix/IE7*/drive_c/Programme/...
>
> Winetricks will install into:
> /home/YOUR_USER/.cache/winetricks/ANY_PREFIX/drive_c/Programme/...
> ore into "the default wineprefix":
> /usr/share/.wine/ ANY_PREFIX/drive_c/Programme/...
> - just for example EACH_PROGRAM_YOU_INSTALL_...INSTALL_A_/_IN
>
> DIFFERENT_UNDERPREFIX
> choose a program to install and this program-setup will build a new wineprefix
> this means a new / another version of an windows
> you cant install all the programs you want by an manuel installation
> - where you can choose the prefix you want
>
> Thats a problem when you'll try to set up a nearly perfect "windows" for
> gaming...
> including all the wanderful .dll's
>
> for example
> let PlayOnLinux install IE7
> have made your "windows-setup"... your wineprefix called IE7... - putting all
> the dll's you want...
> you have...
> /home/YourUser/.PlayOnLinux/wineprefix/IE7/drive_c/Programme/InternetExplorer/ie7.exe
> restart PlayOnLinux
> install Guildwars from game list
> and you have...
> /home/YourUser/.PlayOnLinux/wineprefix/GuildWars/drive_c/Programme/GuildWars/Gw.exe
>
> than use wine to have different paths & more prefixes
>
> than use winetricks to have more different paths & more different prefixes
>
> can somebody please fix this?

Hi devil77329, please stop spamming this bug, your comments are not helping at
all.

Concerning the Witcher, there are probably more problems. This bug is about
registration not working. Also I have an older Witcher version 1.0 vs yours 1.4
Enhanced Edition. If registration is not working for you, try winetricks
wininet. If the registration is working, however the patch check for
registration is failing, it is probably a bug 26538 or you may open a new bug
but see below.

I noticed you are using PlayOnLinux. This is not supported here, try clean
install or ask at PlayOnLinux forums. Also even with clean install bugzilla is
_not_ for user support, try IRC (#winehq at freenode.net), AppDB, wine Forums
or get Crossover for paid support. More links here:
http://www.winehq.org/help/.

I also don't see why you would need .Net 4.0. I did The Witcher install on
Windows XP + patching up to 1.5 to be sure the certificates works on Windows
and only .Net 3.0 is needed. which can be obtained with winetricks.

BTW correct wineprefix is selected with env WINEPREFIX="/path/to/wineprefix"

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #17 from [e-mail] 2011-04-06 09:26:18 CDT ---
(In reply to comment #16)
> Hi devil77329, please stop spamming this bug, your comments are not helping at
> all.
>
> Concerning the Witcher, there are probably more problems. This bug is about
> registration not working. Also I have an older Witcher version 1.0 vs yours 1.4
> Enhanced Edition. If registration is not working for you, try winetricks
> wininet. If the registration is working, however the patch check for
> registration is failing, it is probably a bug 26538 or you may open a new bug
> but see below.
>
> I noticed you are using PlayOnLinux. This is not supported here, try clean
> install or ask at PlayOnLinux forums. Also even with clean install bugzilla is
> _not_ for user support, try IRC (#winehq at freenode.net), AppDB, wine Forums
> or get Crossover for paid support. More links here:
> http://www.winehq.org/help/.
>
> I also don't see why you would need .Net 4.0. I did The Witcher install on
> Windows XP + patching up to 1.5 to be sure the certificates works on Windows
> and only .Net 3.0 is needed. which can be obtained with winetricks.
>
> BTW correct wineprefix is selected with env WINEPREFIX="/path/to/wineprefix"

Sorry this is in sense of spamming for you
... this is my last post...and please...
Leave everything @ it's place

this comments are helping!...users (newbies on linux like me too)
who search for the problem - for example...
in Google
there are not realy much search-outputs anywhere about this problems
thank you very much for explaning some differences and show ore give some
possibuilitys

and last.... I dont say i need .Net 4 - I sayid it is installed already
anyway - thanks a lot
devil

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #18 from [e-mail] 2011-04-06 23:10:49 CDT ---
(In reply to comment #16)
> Hi devil77329, please stop spamming this bug, your comments are not helping at
> all.
>
> Concerning the Witcher, there are probably more problems. This bug is about
> registration not working. Also I have an older Witcher version 1.0 vs yours 1.4
> Enhanced Edition. If registration is not working for you, try winetricks
> wininet. If the registration is working, however the patch check for
> registration is failing, it is probably a bug 26538 or you may open a new bug
> but see below.
>
> I noticed you are using PlayOnLinux. This is not supported here, try clean
> install or ask at PlayOnLinux forums. Also even with clean install bugzilla is
> _not_ for user support, try IRC (#winehq at freenode.net), AppDB, wine Forums
> or get Crossover for paid support. More links here:
> http://www.winehq.org/help/.
>
> I also don't see why you would need .Net 4.0. I did The Witcher install on
> Windows XP + patching up to 1.5 to be sure the certificates works on Windows
> and only .Net 3.0 is needed. which can be obtained with winetricks.
>
> BTW correct wineprefix is selected with env WINEPREFIX="/path/to/wineprefix"

Sorry this is in sense of spamming for you
... this is my last post...and please...
Leave everything @ it's place

this comments are helping!...users (newbies on linux like me too)
who search for the problem - for example...
in Google
there are not realy much search-outputs anywhere about this problems
thank you very much for explaning some differences and show ore give some
possibuilitys

and last.... I dont say i need .Net 4 - I sayd it is installed already
anyway - thanks a lot
devil
I know what this Bug is about

(In reply to comment #13)
> ...
> „Internet>Exception, 12037“
> that means...
> ERROR_INTERNET_SEC_CERT_DATE_INVALID
> 12037
> SSL certificate date that was received from the server is bad. The certificate
> is expired
> ...

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1

--- Comment #19 from Juan Lang  2011-04-07 10:10:53 CDT ---
Confirming with the demo:

When builtin wininet is used, the console output includes the "SSL_connect
failed" line, and the "Check for updates" item in the launcher is disabled.

When native wininet is used, the "Check for updates" item in the launcher is
flashing.

It turns out the bad date on the certificate is explicitly ignored by the app,
but that isn't being honored by wininet.  I'm sending a patch for this.  Even
with this fixed, revocation checking is failing.  I'll look into this more.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #20 from Juan Lang  2011-04-08 10:49:48 CDT ---
The trouble with revocation is that the CA certificate used, "Certum Level
III", doesn't contain any way to check it for revocation, so the revocation
checking code reports that.  That's currently treated as a failure.  More tests
are needed to determine the right thing to do.

For example, it could be that revocation checking should fail, but that the
chain checking code shouldn't treat that as a failure.  It could also be that
lack of a way to check revocation is not treated as a failure for an
intermediate certificate, but is for an end certificate.

[Bug 26527] The Witcher registration doesn't work

http://bugs.winehq.org/show_bug.cgi?id=26527

--- Comment #21 from [e-mail] 2013-11-24 12:11:51 CST ---
This ticket has not been updated for over 900 days. Development recommends
to check the status on your bug every release or two and let to be known if the
bug is still present. If not, mark it fixed. If you are no longer able to put
effort to this ticket, you can abandon it.

Is this still an issue with 1.7.7 or higher ?

[Bug 26527] The Witcher registration doesn't work

https://bugs.winehq.org/show_bug.cgi?id=26527

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |ABANDONED

--- Comment #22 from Ken Sharp  ---
Abandoned

[Bug 26527] The Witcher registration doesn't work

https://bugs.winehq.org/show_bug.cgi?id=26527

Bruno Jesus  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #23 from Bruno Jesus  ---
Closing abandoned bugs.