This should help,
http://update.microsoft.com/windowsupdate/v6/showarticle.aspx?articleid=12&ln=en&IsMu=False
Randhir Vayalambrone
Cell: +1 (717) 350-1177
"Some men see things as they are and say why... I dream of things that never
were and say why not."
GBS
----- Original Message ----
From: Bart Poort <bggp@xs4all.nl>
To: focus-ms@securityfocus.com
Sent: Tuesday, March 14, 2006 10:23:33 AM
Subject: trouble using SSL on WSUS
Hi,
I having some trouble using SSL on WSUS. I configured the server and the
clients according to the deployment guide. The clients aren't having any
problemens when downloading updates through http. I have an unofficially
signed certificate and imported it in Internet Information Services
managen. I activated ssl for the clientwebservice, dssauthwebservice,
serversyncwebservice, simpleauthwebservice and wsusadmin.
I configured the client to use the WSUS server through https. When i force
the client to check for new updates (wuauclt /detectnow) the following
errormessage appears in the WindowsUpdate log:
2006-03-14 15:17:23 1048 d38 AU #############
2006-03-14 15:17:23 1048 d38 AU ## START ## AU: Search for
updates
2006-03-14 15:17:23 1048 d38 AU #########
2006-03-14 15:17:23 1048 d38 AU <<## SUBMITTED ## AU: Search for
updates
[CallId = {C535C51C-A97E-4447-920F-C26B349DD626}]
2006-03-14 15:17:23 1048 428 Agent *************
2006-03-14 15:17:23 1048 428 Agent ** START ** Agent: Finding
updates
[CallerId = AutomaticUpdates]
2006-03-14 15:17:23 1048 428 Agent *********
2006-03-14 15:17:23 1048 428 Misc WARNING: Send failed with hr =
80072f8f.
2006-03-14 15:17:23 1048 428 Misc WARNING: SendRequest failed
with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth
Schemes used : <>
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestUsingProxy
failed for <https://windowsupdate.xxxxxx.nl/selfupdate/wuident.cab>. error
0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
ShouldFileBeDownloaded
failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: Send failed with hr =
80072f8f.
2006-03-14 15:17:23 1048 428 Misc WARNING: SendRequest failed
with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth
Schemes used : <>
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestUsingProxy
failed for <https://windowsupdate.xxxxxx.nl/selfupdate/wuident.cab>. error
0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
ShouldFileBeDownloaded
failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: Send failed with hr =
80072f8f.
2006-03-14 15:17:23 1048 428 Misc WARNING: SendRequest failed
with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth
Schemes used : <>
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestUsingProxy
failed for <https://windowsupdate.xxxxxx.nl/selfupdate/wuident.cab>. error
0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
ShouldFileBeDownloaded
failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: Send failed with hr =
80072f8f.
2006-03-14 15:17:23 1048 428 Misc WARNING: SendRequest failed
with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth
Schemes used : <>
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestUsingProxy
failed for <https://windowsupdate.xxxxxx.nl/selfupdate/wuident.cab>. error
0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: WinHttp:
ShouldFileBeDownloaded
failed with 0x80072f8f
2006-03-14 15:17:23 1048 428 Misc WARNING: DownloadFileInternal
failed for
https://windowsupdate.xxxxxx.nl/selfupdate/wuident.cab: error 0x80072f8f
2006-03-14 15:17:23 1048 428 Setup FATAL: IsUpdateRequired
failed with
error 0x80072f8f
2006-03-14 15:17:23 1048 428 Setup WARNING: SelfUpdate: Default
Service:
IsUpdateRequired failed: 0x80072f8f
2006-03-14 15:17:23 1048 428 Setup WARNING: SelfUpdate: Default
Service:
IsUpdateRequired failed, error = 0x80072F8F
2006-03-14 15:17:23 1048 428 Agent * WARNING: Skipping scan,
self-update
check returned 0x80072F8F
2006-03-14 15:17:23 1048 428 Agent * WARNING: Exit code =
0x80072F8F
2006-03-14 15:17:23 1048 428 Agent *********
2006-03-14 15:17:23 1048 428 Agent ** END ** Agent: Finding
updates
[CallerId = AutomaticUpdates]
2006-03-14 15:17:23 1048 428 Agent *************
2006-03-14 15:17:23 1048 428 Agent WARNING: WU client failed
Searching for
update with error 0x80072f8f
2006-03-14 15:17:23 1048 428 AU >>## RESUMED ## AU: Search for
updates
[CallId = {C535C51C-A97E-4447-920F-C26B349DD626}]
2006-03-14 15:17:23 1048 428 AU # WARNING: Search callback
failed,
result = 0x80072F8F
2006-03-14 15:17:23 1048 428 AU #########
2006-03-14 15:17:23 1048 428 AU ## END ## AU: Search for
updates
[CallId = {C535C51C-A97E-4447-920F-C26B349DD626}]
2006-03-14 15:17:23 1048 428 AU #############
2006-03-14 15:17:23 1048 428 AU AU setting next detection
timeout to
2006-03-14 15:15:01
2006-03-14 15:17:28 1048 428 Report REPORT EVENT:
{96D02F42-470E-4CB4-A0B0-D68D39890A33} 2006-03-14
15:17:23+0100 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0
80072f8f SelfUpdate Failure Software
Synchronization Error: Agent failed detecting with reason: 0x80072f8f
I've read on serveral sites that the server certificate has to be imported
to the client local Trusted Root CA so this is what i did.
I've made an export of the certificate on the wsus server (pfx format). I
copied it to one of my clients just to test it. I tried to import the
certificate to the local computer Trusted Root CA but it still doesn't
seem to work :-(. When i take a look at the certificate overview (on
Trusted Root CA, ALL view) my certificate appears not to be listed. So i
impoted the certificate but it isn't listed. where did it go?
Maybe this isn't the solution to my problem. If so, can anyone tell me
where to look?
Thanks in advance,
Bart
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
