WinGate update error

[2CTCSAOL]

Hi all,

I am running WinGate 8.0.3 on Windows Server 2008 R2.
The server is dual-homed to my internal network and a DSL modem.
The proxy itself works fine but every time I try to update I receive an error:

(https://updates.qbik.com/serviceV2.php) SOAP 1.1 fault: SOAP-ENV:Client [no subcode]
"An HTTP processing error occurred"
Detail: The certificate authority is invalid or incorrect.
GetLastError:12045
Certificate:
Issuer: 单਍敎睴牯潓畬楴湯⁳⹌⹌⹃਍敎睴牯潓畬楴湯⁳敃瑲晩捩瑡⁥畁桴牯瑩y
Subject: 婎਍〱㄰വ上൚䄊捵汫湡൤倊牡敮汬਍䰢癥汥ㄠ‬㠲夠牯瑓敲瑥ഢ儊楢敎⁷敚污湡⁤楌業整൤䠊慥⁤晏楦散਍敓畣敲䰠湩卓⁌楗摬慣摲਍⸪扱歩挮浯

I have tried changing the update settings to use WinGate as a proxy for updates, tried using no proxy for updates etc.
Windows firewall is enabled on my DSL connection.
If anyone has a suggestion I would appreciate it very much.

[adrien]

Hi

the key issue being reported is about the certificate authority being invalid.

WinGate update server uses an SSL certificate issued by Network Solutions.

Normally windows will download any intermediate certificates it needs in order to validate a site certificate, but is it possible something was preventing this (e.g. an upstream proxy?).

You may also be able to use windows update to update the list of root certificates on 2008 R2.

Regards

Adrien de Croy

[2CTCSAOL]

Thanks for the response.

I ran windows update and installed every available update including the root certificate updates.
This did not resolve my issue unfortunately.

There isn't a proxy upstream, the only thing between the server and the modem is the Windows Firewall.
Since the proxy works okay I assume the firewall configuration worked.

I attempted to visit the update site https://updates.qbik.com/servicev2.php from a browser on the server and received a certificate error which confirms the certificate problem.
After that I manually installed all the certificates up to the root CA from IE, same problem remains in IE and in WinGate.

Any other thoughts?

Thanks!

[adrien]

HI

when you use a browser to install certs like that, it probably put them in your personal cert store, rather than the computer cert store.

You could try using mmc with the certificates snap-in to add them also to the machine store.

Regards

Adrien

[2CTCSAOL]

That and adding them to the QBik Service account did the trick.
Adding them only to the machine store didn't work, but once I added them all to the service account, voila!
Either way, thanks for the help!

[adrien]

thanks for reporting back, and glad you got it worked out - so do you run WinGate in a special account?

Regards

Adrien

[2CTCSAOL]

No special account, I just let WinGate use the default service account on the system.
There were only three certificates loaded under intermediate to that account, but once I loaded the fourth one it worked like a charm.
Interesting to say the least but thanks for the help!

[puks]

After upgrading to Wingate 8.5.4.4852 I got the same issue.

What are exact steps to fix it?