SW ver 15.7.4 - download problems

[DV52]

It was with eager anticipation that I tried to download the newest VCDS version (ver 15.7.4). My laptop is a surface pro3 without any nannyware and running bog-standard windows 10 (64 bit ver). However, much to my disappointment, after waiting for the file to download, I got the following error message

Tried multiple times with the same result. Then tried on my PC (windows 7 - 64 bit). Still the same error message. Given that I've read at least one post on the forum saying that they were able to download 15.7.4, I can only assume that my issue is with 64 bit machines - is there a known problem with this latest version?
Don

EDIT: Found a work-around for this error as follows:

Step1 - find the downloaded file
Step2 - right click on the file and select properties
Step3 - next to the words "This file came from another computer and might be blocked to help protect this computer" click Unblock
Step4 - Click OK

 

[Sebastian]

We've had a similar report yesterday, also from a Windows 7 installation - though based on a different certificate. Interestingly enough, on my Windows 7 Pro test machine, I don't have this problem BUT I do get a similar report for the latest VirtualBox installer - which has a valid signature. That leads me to assume this isn't a problem with our signature but something with the latest Windows 7 iterations.

After some digging, I came across this note...

https://forums.virtualbox.org/viewtopic.php?f=6&t=75929#

...and specifically this MS article...

https://technet.microsoft.com/en-us/library/security/2880823.aspx

...and then checked our signature. Guess what? SHA-1

I'll look into this today and get back to you with more details.

 

[stevecrk]

There should be a way to re-issue (technically it's called re-key) the existing certificate with sha-2 algorithm.

For that, I think you have to contact your certificate vendor.

 

[DV52]

Sebastian: Thanks for the heads-up. Interesting problem! And yes, sha1 too in the English screens

Something that needs to be fixed eventually (I guess), but the work-around seems to be OK, so not a big problem (I think)

Don

 

[Sebastian]

Don, can you download the following file and let me know if this fixes the error message? This is a German version of VCDS, so don't actually install it - but it should be enough to test the signature. It is double signed, SHA1 & SHA256.

http://www.ross-tech.de/downloads/drv

@Steve, thanks for the note. The certificate used for the non-US versions was 256 already but I hadn't updated signing tool in a while and it was sticking with SHA1. *D'Oh*

 

[DV52]

Don, can you download the following file and let me know if this fixes the error message? This is a German version of VCDS, so don't actually install it - but it should be enough to test the signature. It is double signed, SHA1 & SHA256.

http://www.ross-tech.de/downloads/drv

Sebastian: Good morning! Alas the same error message in this file! pictures below. Why does windows report multiple copies of the sha 256 signature?
Don

Edit: Odd thing! Unlike the previous English version which was not accessible (as an executable file) without my fix above, and notwithstanding the message about blocking the program in my picture below, I can access your German version (without the fix) and run it. I didn't actually install this morning's file, but the correct screens opened to install the program - go figure!!

 

[Uwe]

This should be fixed now.

-Uwe-

 

[DV52]

This should be fixed now.

-Uwe-

Uwe: dynamic for the latest version (just downloaded) is a little changed! File downloads OK and passes security scan. Can be executed OK, so no problems there. Still get the odd message about being blocked and the double entry for sha256 - but these don't matter I guess because the file executes OK (just housekeeping issues for MS Windows- I guess)
Don

 

[Eric]

Don, thank you. Screenshots please?

 

[Sebastian]

Don, I don't see any double sha256 for the the latest VCDS-Release-15.7.4-Installer.exe

signtool verify /all /pa .\VCDS-Release-15.7.4-Installer.exe
File: .\VCDS-Release-15.7.4-Installer.exe
Index  Algorithm  Timestamp
========================================
0      sha1       Authenticode
1      sha256     RFC3161

Successfully verified: .\VCDS-Release-15.7.4-Installer.exe

The latest VCDS-DRV-15073-Installer.exe is also good.

signtool verify /all /pa .\VCDS-DRV-15073-Installer.exe
File: .\VCDS-DRV-15073-Installer.exe
Index  Algorithm  Timestamp
========================================
0      sha1       Authenticode
1      sha256     RFC3161

Successfully verified: .\VCDS-DRV-15073-Installer.exe

 

[DV52]

Eric/Sebatian: Hmm........... just downloaded the file again, just to make sure of my facts (I've got so many versions of this file, wanted to be certain that I'm not mixing-up copies. Here's the latest pics. Still get the blocking message, but I've now lost the double Sha256 report (sorry Sebastian).

Perhaps the problem is at my end given that no-one else is complaining (I'm not complaining either)- it's really not a problem because, as I said previously, the file loads OK
Don.

 

[Sebastian]

The [Unblock] checkbox on the file properties/security section shouldn't be relevant. The 2 important questions are...

- does the download using internet explorer work, i.e. does it let you execute the file?
- can regularly double click/start the file once it's downloaded onto the PC in question?

 

[DV52]

The [Unblock] checkbox on the file properties/security section shouldn't be relevant. The 2 important questions are...

- does the download using internet explorer work, i.e. does it let you execute the file?
- can regularly double click/start the file once it's downloaded onto the PC in question?

Sebastian: Definitely something weird. Here's the screen shots from yesterday's download (which was the subject of my reply to Uwe). I wanted to send you these just to prove that I wasn't smoking any of those funny cigarettes! I've got a problem with the date on my Laptop, so ignore the file creation date. Notice the timestamp for the sha256 certificate is the same as today's download (which only appears once)

Anyhow, yes to both your questions - so as I said previously, not a big issue
Thanks for look at this for me
Don

 

[suffeks]

i was able to update it no problem

5F has long coding helper now
A5 still no

and still no rod for engine channel, so no measuring blocks, b8 passat bitdi

 

[Sebastian]

Mind sending us a fresh Auto-Scan via email if you get the chance?