Results 1 to 4 of 4

Thread: KB978601 causes "invalid digital signature" error with a CAB file

  1. #1
    J Guest

    KB978601 causes "invalid digital signature" error with a CAB file

    Customers with KB978601 installed are unable install one of our
    software products. They get the error "invalid digital signature" when
    the installer reaches the last cab file. I was able to reproduce the
    problem on Windows 7 and XP (both with the latest updates), and also
    verified the problem goes away after uninstalling KB978601.

    The following error message was logged: "Error 1330. A file that is
    required cannot be installed because the cabinet file setup11.cab has
    an invalid digital signature. This may indicate that the cabinet file
    is corrupt. Error 24592 was returned by WinVerifyTrust."

    Our product comes with 11 cab files. Only the last one gives the
    error. When you right-click on the cab file and view the certificate,
    the message is "This digital signature is not valid."

    This problem just started happening yesterday (4/15/10).

    Any ideas or similar experiences?


  2. #2
    PA Bear [MS MVP] Guest

    Re: KB978601 causes "invalid digital signature" error with a CAB file


    Is the digital signature valid?

    For home users (only), no-charge support is available by calling
    1-866-PCSAFETY (and/or 1-866-234-6020 and/or 1-800-936-5700) in the United
    States and in Canada or by contacting your local Microsoft subsidiary.
    There is no-charge for support calls that are associated with security
    updates. When you call, clearly state that your problem is related to a
    Security Update and cite the update's KB number (e.g., KB978601).

    Or you can...

    Start a free Windows Update support incident request:
    https://support.microsoft.com/oas/de...spx?gprid=6527

    Customers who experience issues installing Microsoft security updates also
    can visit the following pages for assistance:
    https://consumersecuritysupport.microsoft.com/
    http://support.microsoft.com/ph/6527#tab3

    For more information about how to contact your local Microsoft subsidiary
    for security update support issues, visit the International Support Web
    site: http://support.microsoft.com/common/international.aspx

    For enterprise customers, support for security updates is available through
    your usual support contacts.


    J wrote:
    > Customers with KB978601 installed are unable install one of our
    > software products. They get the error "invalid digital signature" when
    > the installer reaches the last cab file. I was able to reproduce the
    > problem on Windows 7 and XP (both with the latest updates), and also
    > verified the problem goes away after uninstalling KB978601.
    >
    > The following error message was logged: "Error 1330. A file that is
    > required cannot be installed because the cabinet file setup11.cab has
    > an invalid digital signature. This may indicate that the cabinet file
    > is corrupt. Error 24592 was returned by WinVerifyTrust."
    >
    > Our product comes with 11 cab files. Only the last one gives the
    > error. When you right-click on the cab file and view the certificate,
    > the message is "This digital signature is not valid."
    >
    > This problem just started happening yesterday (4/15/10).
    >
    > Any ideas or similar experiences?



  3. #3
    Harry Johnston [MVP] Guest

    Re: KB978601 causes "invalid digital signature" error with a CABfile

    On 2010-04-17 4:15 p.m., J wrote:

    > The following error message was logged: "Error 1330. A file that is
    > required cannot be installed because the cabinet file setup11.cab has
    > an invalid digital signature. This may indicate that the cabinet file
    > is corrupt. Error 24592 was returned by WinVerifyTrust."
    >
    > Our product comes with 11 cab files. Only the last one gives the
    > error. When you right-click on the cab file and view the certificate,
    > the message is "This digital signature is not valid."


    I'd hazard a guess that the file will need to be resigned. Update KB978601
    changes the way in which cabinet and executable files are signed; I'm not expert
    in this area, but from my interpretation of it this change will invalidate
    previously good signatures under certain circumstances.

    You might get better advice in microsoft.public.security.crypto.

    Harry.

    --
    Harry Johnston
    http://harryjohnston.wordpress.com

  4. #4
    sgillbee Guest

    Re: KB978601 causes "invalid digital signature" error with a CAB file


    We've run into this issue with KB978601 also.

    The key issue here is that MS stepped up enforcement in the signatur
    validation subsystem in such a way that previously valid signatures no
    don't validate.

    It's a simple test:
    1. Uninstall KB978601
    2. Validate the signature (look in file properties). It's okay.
    3. Install KB978601
    4. Validate the signature again. Now it's invalid. Same file. Nothin
    changed except for WinTrust.dll (the core Authenticode DLL in Window
    that is updated by KB978601).

    For our situation, the cab files that fail post-KB978601 validation ar
    all similar: they all contain only 1 zero-length file. So essentiall
    these cabs are empty (just a file list with no real contents). As soo
    as we put some dummy data in the cab file (20 characters in our case)
    the signature validated just fine

    --
    sgillbe
    Posted via http://www.win7heads.co


Similar Threads

  1. Getting "Package file is invalid" error on Motorola Triumph
    By SaibalJha in forum Portable Devices
    Replies: 8
    Last Post: 07-11-2011, 05:36 PM
  2. Replies: 4
    Last Post: 12-02-2011, 06:10 AM
  3. "Warning: Your signature file is too large."
    By shivendra in forum Windows Vista Mail
    Replies: 2
    Last Post: 16-02-2010, 07:08 PM
  4. Replies: 2
    Last Post: 30-09-2009, 12:54 AM
  5. Replies: 3
    Last Post: 30-07-2009, 08:40 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •