2003 Certificate Error
Contents |
One games Xbox 360 games PC sha 2 certificates windows-server-2003 games Windows games Windows phone games Entertainment All kb938397 Entertainment Movies & TV Music Business & Education Business Students & windows xp sha2 hotfix educators Developers Sale Sale Find a store Gift cards Products Software & services Windows Office Free downloads & security
Windows Server 2003 R2 Sha256
Internet Explorer Microsoft Edge Skype OneNote OneDrive Microsoft Health MSN Bing Microsoft Groove Microsoft Movies & TV Devices & Xbox All Microsoft devices Microsoft Surface All Windows PCs & tablets PC accessories Xbox & games Microsoft Band Microsoft fix200653 Lumia All Windows phones Microsoft HoloLens For business Cloud Platform Microsoft Azure Microsoft Dynamics Windows for business Office for business Skype for business Surface for business Enterprise solutions Small business solutions Find a solutions provider Volume Licensing For developers & IT pros Develop Windows apps Microsoft Azure MSDN TechNet Visual Studio For students & educators Office for students OneNote in classroom Shop PCs & tablets perfect for students Microsoft in Education Support Sign in Cart Cart Javascript is disabled Please enable javascript and refresh the page Cookies are disabled Please enable cookies and refresh the page CV: {{ getCv() }} English (United States) Terms of use Privacy & cookies Trademarks © 2016 Microsoft
One games Xbox 360 games PC ms13-095 games Windows games Windows phone games Entertainment All
Windows Xp Sha256
Entertainment Movies & TV Music Business & Education Business Students &
Kb2868626
educators Developers Sale Sale Find a store Gift cards Products Software & services Windows Office Free downloads & security https://support.microsoft.com/en-us/kb/324345 Internet Explorer Microsoft Edge Skype OneNote OneDrive Microsoft Health MSN Bing Microsoft Groove Microsoft Movies & TV Devices & Xbox All Microsoft devices Microsoft Surface All Windows PCs & tablets PC accessories Xbox & games Microsoft Band Microsoft https://support.microsoft.com/en-us/kb/276597 Lumia All Windows phones Microsoft HoloLens For business Cloud Platform Microsoft Azure Microsoft Dynamics Windows for business Office for business Skype for business Surface for business Enterprise solutions Small business solutions Find a solutions provider Volume Licensing For developers & IT pros Develop Windows apps Microsoft Azure MSDN TechNet Visual Studio For students & educators Office for students OneNote in classroom Shop PCs & tablets perfect for students Microsoft in Education Support Sign in Cart Cart Javascript is disabled Please enable javascript and refresh the page Cookies are disabled Please enable cookies and refresh the page CV: {{ getCv() }} English (United States) Terms of use Privacy & cookies Trademarks © 2016 Microsoft
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site http://serverfault.com/questions/606805/enabling-sha2-certificate-support-on-windows-server-2003 About Us Learn more about Stack Overflow the company Business Learn more about hiring developers or posting ads with us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask a question Anybody can answer The best windows xp answers are voted up and rise to the top Enabling SHA2 Certificate Support on Windows Server 2003 up vote 10 down vote favorite 5 A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a script task which downloads a webpage using an SSL connection: "The windows xp sha2 underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Some digging revealed a couple of things: I also could not access the website in question using IE8 from the server (I can with Firefox), and the website had just been issued a new SHA256 certificate. After doing some research, my current assumption is that the problem is that I don't have support for SHA2 certificates on this server. I grabbed the certificate from the site and ran CertUtil -verify [cert file] which gives the following result: The signature of the certificate can not be verified. 0x80096004 (-2146869244) I found a couple of hotfixes from Microsoft, and from what I understand, either of them should enable support for SHA2 certificates: http://support.microsoft.com/kb/938397 http://support.microsoft.com/kb/968730 So I requested the hotfix for kb968730 and attempted to install it, but got the following error: The installation cannot continue because the following packages might not be valid: KB2616676_V2 c:\windows\system32\dllcache\crypt32.dll 5.131.3790.4905 KB2616676_V2 c:\windows\system32\crypt32.dll 5.131.3790.4905 Reinstall the packages listed above, and then reinstall KB968730 The version of the crypt32 library that is included with the hotfix is 5.131.3790.4477 which explains why the installer won't proceed. At this point I'm not