Help me fix this

[WeeGeez]

So I have this error in PRLauncher

Warning: Unable to load latest version information

> The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
Warning: Error loading available mumble servers

> The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

When I google this string, It points to certificates issue specifically.

So I'd like to source the ceritifcate, that used for the PR backbone server, in order to import it into my OS to see if this solves anything.

(offline accounts work, just not online).


Please don't tell me to update OS. I am confident that there is a mere sleight of hand needed here. I have tried so many things and over a long period, Ironically I never actually noticed the file PRLauncher.log in mods/pr folder before. It has helped to narrow the problem considerably, as I say, it suggests the issue is certificate related.

FWIW TLS 1.2 is enabled on XP (which is actually Embedded Edition, and as far as I know is still used by businesses of which I have worked for in the past, even as recently as late as december last year in fact). Embedded Edition aka POS 2009 actually still recieves regular updates to this day.

[WeeGeez]

Screencap of Wireshark, (running while attempting to connect to PR via launcher)
notice the 'news ticker' connection works perfectly fine:


Are any of these numbers TDP or UDP ports I can enter into XP internals somewhere? Notice "1403" and "29900" above.

I welcome anyone to an AnyDesk session with me to remote control my PC if they want to have a look.

Anydesk (3MB, brilliant lightweight) is cross compatible with XP and windows 10. I have succesfully connected to win 7 pc while on XP. In this regard and as it pertains to software, its an ideal example of how things should coded, period. But you know if all software was this universal on windows, it would infringe on the few remainder excuses microsoft have to justify upgrading. Don;t get me wrong; OS Upgrades necessitated by requirements mandated by hardware manufacturers is valid. But software too? please. AD proves it can be done. artificial software barriers are just one of the ever creative yet unconvincing reasons used to force users to upgrade (to what I view as mere rehashed equivalents of their existing products).

Stop falling for this BS and emancipate thigh self...
Apologies for rant but I had to vent.

EDIT: attached the expandable wireshark compatible log file.

[AlonTavor]

29900 is not even TLS. I'm not sure what's failing.

1403 is the port your OS selected. its random.

[AlonTavor]

We do have this TLS (HTTPs) request that goes to this CDN on launch. maybe this fails. https://c4e3967df0bda9d24c60-efd86ecb00 ... ckcdn.com/

[WeeGeez]

Hi thanks for that
What do you get when you open it in your web browser?
I get

Not Found
resource could not be found

also someone PMd me and said 29900 is the BF2 server,

[AlonTavor]

If you get "not found" then you can connect to it. Nothing supposed to be on "/".

The server on 29900 does not use TLS. Its possible something on your end is trying to force that connection to be TLS, evident by your end choosing to close the connection (FIN) before receiving any application data (PSH) from the server.

[WeeGeez]

It is really weird because In mid 2018 I used to play on XP no problem and then it spontaneously stopped and I didnt change system config client side. MS auto updates off. timing wise IIRC it was just after update 1.5.4.5. i.e. last time it ever worked I was playing 1.5.4.4. But mats has assured me that patches have not altered anything remotely related to connectivity / PR launcher. SO I suspect its something todo with a delayed killswitch built into .NET networking / main servers rejecting XP al together.

Where can you see that its forcing TLS in screenshot?

edit ; ok

I reckon bill gates has a personal vendetta against XP users....

[AlonTavor]

I'm just guessing something on your end does not like the connection, because your end closes it before any data.

[WeeGeez]

More testing:
I applied patches 1.5.0.0 to 1.5.5.3 manually, and intermediately ran PR Launcher with wireshark running between each, then saved the output of wireshark as seperate files.
i.e. installed 1.5.5.0 > ran PRLauncher with wireshark monitoring, attemping to connect, stopped wireshark, saved log > installed relevant incrimental patch manually (1.5.4.0) > repeat .

A change in behaviour can be seen at 1.5.4.4 & 1.5.4.5(notice change in file size):


1.5.4.4.pcapng:


1.5.4.5.pcapng:


Those preceding 1.5.4.4 are identical to 1.5.4.4
Those following 1.5.4.5 are identical to 1.5.4.5.

Retarded if you ak me. I've been told tho that nothing changed. FWIW In 1.5.4.4 I can actually access my account and log in, however there are no servers in server browser.

[WeeGeez]

I managed to obtain the actual cerificate file for the cdn server. (attached).
It uses TLS 1.2.

I imported it manually via IE settings (which I believe are system-wide).
Nothing changed.

also:


seperately, tried this and it didn't work:
https://www.admin-enclave.com/en/articl ... nhttp.html
(is appplicable to XP Embedded): https://support.microsoft.com/en-gb/hel ... on-winhttp

Also:
https://forums.iis.net/t/1149787.aspx

[AlonTavor]

I don't think its rackcdn. I can't figure out what's choosing to close that connection. Is there more in the log?

Not much changed regarding the connection itself in 1.5.4.5.

[Hornster]

I had a look at the Certificate you posted. It's root certificate is dated to 2006 and its intermediate to 2013. I assume that out of the box XP with latest patch level should have both in its Cert store. However, to doublecheck, please look it up via:

Run (WINDOWS+R): mmc.exe


File -> Add Snap-In


Add "Certicates" and when prompted choose "computer account"

-> Next -> OK

Look with in "Trusted Root Certificate Authorities" -> "Certicates" for "DigiCert Global Root CA" (Valid until 2031-NOV-10)


Same for "3rd Party Certificate Authorities"

Do you have the Digicert Global Root CA in your cert store?
If not, please import it (attached to this post) and try agai.

[WeeGeez]

I will try this
Edit: Digicert Global Root CA isn't installed! I will try when I can and report (re installing PR)


BTW PR v1.5.4.5 is the version when PERFBETA (which is multithread related) was forced ON mod-wide by default.

The error mentions something about thread exit. correlated?

[AlonTavor]

The PERFBETA stuff is completely irrelevant.
Maybe some other thing there was trying to TLS, fails, and causes that connection to close without doing anything.

[WeeGeez]

Ok i tried importin the certs. nothing.
@Alon: mumble perhaps? theres a setting in mumble called "suppres certificates and passwords change" but i can't uncheck it.

Maybe a IP to connect to in mumble to test if mumble works first and foremost.

Btw the time this happened was between may and july 2018. July happened to be the month everybody was forced to be HTTPS HTTPS or bust. Insecure HTTP D-Day is tomorrow

[AlonTavor]

Mumble only launches after you join a server, so its not it.