Failed to auto-update to 0.5.7 due to certificate error #1313

andronoob · 2019-09-28T13:59:55Z

Description

I'm running LNApp 0.5.6 win32 on Windows 10, it failed to auto-update to 0.5.7.

Screenshot and/or logs if applicable

Sign verification failed, installer signed with incorrect certificate: publisherNames: Sectigo RSA Code Signing CA, raw info: {
  "SignerCertificate": {
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1597449599000)/",
    "NotBefore": "/Date(1565827200000)/",
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "00DF494F2254FDE8FF535FD3CBC32755E8",
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.11",
      "FriendlyName": "sha256RSA"
    },
    "Thumbprint": "2221C28264ABFA0E03E477DD020B10C0B65F053E",
    "Version": 3,
    "Issuer": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB",
    "Subject": "CN=\"LIGHTNING LABS, INC.\", O=\"LIGHTNING LABS, INC.\", STREET=720 University Ave Suite 200, L=Palo Alto, S=California, PostalCode=94301, C=US"
  },
  "TimeStamperCertificate": {
    "Archived": false,
    "Extensions": [
      "System.Security.Cryptography.X509Certificates.X509BasicConstraintsExtension",
      "System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension",
      "System.Security.Cryptography.X509Certificates.X509KeyUsageExtension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509SubjectKeyIdentifierExtension",
      "System.Security.Cryptography.X509Certificates.X509Extension"
    ],
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Symantec Time Stamping Services CA - G2, O=Symantec Corporation, C=US",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1609286399000)/",
    "NotBefore": "/Date(1350518400000)/",
    "HasPrivateKey": false,
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "0ECFF438C8FEBF356E04D86A981B1A50",
    "SubjectName": {
      "Name": "CN=Symantec Time Stamping Services Signer - G4, O=Symantec Corporation, C=US",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.5",
      "FriendlyName": "sha1RSA"
    },
    "Thumbprint": "65439929B67973EB192D6FF243E6767ADF0834E4",
    "Version": 3,
    "Handle": 2287546697632,
    "Issuer": "CN=Symantec Time Stamping Services CA - G2, O=Symantec Corporation, C=US",
    "Subject": "CN=Symantec Time Stamping Services Signer - G4, O=Symantec Corporation, C=US"
  },
  "Status": 0,
  "StatusMessage": "签锟斤拷锟斤拷通锟斤拷锟斤拷证锟斤拷"
}
Error: Error: New version 0.5.7-alpha is not signed by the application owner: publisherNames: Sectigo RSA Code Signing CA, raw info: {
  "SignerCertificate": {
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1597449599000)/",
    "NotBefore": "/Date(1565827200000)/",
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "00DF494F2254FDE8FF535FD3CBC32755E8",
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.11",
      "FriendlyName": "sha256RSA"
    },
    "Thumbprint": "2221C28264ABFA0E03E477DD020B10C0B65F053E",
    "Version": 3,
    "Issuer": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB",
    "Subject": "CN=\"LIGHTNING LABS, INC.\", O=\"LIGHTNING LABS, INC.\", STREET=720 University Ave Suite 200, L=Palo Alto, S=California, PostalCode=94301, C=US"
  },
  "TimeStamperCertificate": {
    "Archived": false,
    "Extensions": [
      "System.Security.Cryptography.X509Certificates.X509BasicConstraintsExtension",
      "System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension",
      "System.Security.Cryptography.X509Certificates.X509KeyUsageExtension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509Extension",
      "System.Security.Cryptography.X509Certificates.X509SubjectKeyIdentifierExtension",
      "System.Security.Cryptography.X509Certificates.X509Extension"
    ],
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Symantec Time Stamping Services CA - G2, O=Symantec Corporation, C=US",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1609286399000)/",
    "NotBefore": "/Date(1350518400000)/",
    "HasPrivateKey": false,
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "0ECFF438C8FEBF356E04D86A981B1A50",
    "SubjectName": {
      "Name": "CN=Symantec Time Stamping Services Signer - G4, O=Symantec Corporation, C=US",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.5",
      "FriendlyName": "sha1RSA"
    },
    "Thumbprint": "65439929B67973EB192D6FF243E6767ADF0834E4",
    "Version": 3,
    "Handle": 2287546697632,
    "Issuer": "CN=Symantec Time Stamping Services CA - G2, O=Symantec Corporation, C=US",
    "Subject": "CN=Symantec Time Stamping Services Signer - G4, O=Symantec Corporation, C=US"
  },
  "Status": 0,
  "StatusMessage": "签锟斤拷锟斤拷通锟斤拷锟斤拷证锟斤拷"
}

The text was updated successfully, but these errors were encountered:

Roasbeef · 2019-10-23T02:23:04Z

Where'd you obtain that fragment above from?

andronoob · 2019-10-23T03:53:32Z

@Roasbeef I'm running Lightning.exe from windows command prompt console.

Roasbeef · 2019-10-23T04:09:21Z

A new version was just released, are you able to update to this version?

…

On Tue, Oct 22, 2019, 8:53 PM andronoob ***@***.***> wrote: @Roasbeef <https://github.com/Roasbeef> I'm running Lightning.exe from windows command prompt console. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#1313?email_source=notifications&email_token=AAHTWLVFBHHOPAUVEYGDXX3QP7DD5A5CNFSM4I3OIR22YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEB76USA#issuecomment-545253960>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAHTWLQFX3EFJEOXJAHEBWLQP7DD5ANCNFSM4I3OIR2Q> .

andronoob · 2019-10-23T04:16:14Z

@Roasbeef No. Same problem.

I haven't tried manual update yet, though it should work.

andronoob · 2019-10-23T06:06:43Z

I have manually checked the signature of temp-Lightning-win32v0.5.8-alpha.exe in file property window (with a filesystem permission trick to prevent auto-deletion), it reported that “this digital signature is OK”.

githorray · 2019-10-24T08:25:27Z

Still failing to auto-update to 0.5.8. I had to manually install to get on 0.5.7 from 0.5.6.

Error: Error: New version 0.5.8-alpha is not signed by the application owner: pu
blisherNames: Sectigo RSA Code Signing CA, raw info: {
  "SignerCertificate": {
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=G
reater Manchester, C=GB",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1597449599000)/",
    "NotBefore": "/Date(1565827200000)/",
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "00DF494F2254FDE8FF535FD3CBC32755E8",
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.11",
      "FriendlyName": "sha256RSA"
    },
    "Thumbprint": "2221C28264ABFA0E03E477DD020B10C0B65F053E",
    "Version": 3,
    "Issuer": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=G
reater Manchester, C=GB",
    "Subject": "CN=\"LIGHTNING LABS, INC.\", O=\"LIGHTNING LABS, INC.\", STREET=
720 University Ave Suite 200, L=Palo Alto, S=California, PostalCode=94301, C=US"

  },

githorray · 2019-10-25T01:56:51Z

fingers crossed... https://github.com/lightninglabs/lightning-app/releases/tag/v0.5.9-alpha

githorray · 2019-10-25T02:14:42Z

Manually updated to 0.5.8. Same error on auto-update to 0.5.9. Maybe still waiting on something to refresh?

Error: Error: New version 0.5.9-alpha is not signed by the application owner: pu
blisherNames: Sectigo RSA Code Signing CA, raw info: {
  "SignerCertificate": {
    "FriendlyName": "",
    "IssuerName": {
      "Name": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=G
reater Manchester, C=GB",
      "Oid": "System.Security.Cryptography.Oid"
    },
    "NotAfter": "/Date(1597449599000)/",
    "NotBefore": "/Date(1565827200000)/",
    "PrivateKey": null,
    "PublicKey": {
      "Key": "System.Security.Cryptography.RSACryptoServiceProvider",
      "Oid": "System.Security.Cryptography.Oid",
      "EncodedKeyValue": "System.Security.Cryptography.AsnEncodedData",
      "EncodedParameters": "System.Security.Cryptography.AsnEncodedData"
    },
    "SerialNumber": "00DF494F2254FDE8FF535FD3CBC32755E8",
    "SignatureAlgorithm": {
      "Value": "1.2.840.113549.1.1.11",
      "FriendlyName": "sha256RSA"
    },
    "Thumbprint": "2221C28264ABFA0E03E477DD020B10C0B65F053E",
    "Version": 3,
    "Issuer": "CN=Sectigo RSA Code Signing CA, O=Sectigo Limited, L=Salford, S=G
reater Manchester, C=GB",
    "Subject": "CN=\"LIGHTNING LABS, INC.\", O=\"LIGHTNING LABS, INC.\", STREET=
720 University Ave Suite 200, L=Palo Alto, S=California, PostalCode=94301, C=US"

  },

andronoob changed the title ~~Failed to update to 0.5.7 due to certificate error~~ Failed to auto-update to 0.5.7 due to certificate error Sep 28, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Failed to auto-update to 0.5.7 due to certificate error #1313

Failed to auto-update to 0.5.7 due to certificate error #1313

andronoob commented Sep 28, 2019

Roasbeef commented Oct 23, 2019

andronoob commented Oct 23, 2019

Roasbeef commented Oct 23, 2019 via email

andronoob commented Oct 23, 2019 •

edited

Loading

andronoob commented Oct 23, 2019 •

edited

Loading

githorray commented Oct 24, 2019

githorray commented Oct 25, 2019

githorray commented Oct 25, 2019

Failed to auto-update to 0.5.7 due to certificate error #1313

Failed to auto-update to 0.5.7 due to certificate error #1313

Comments

andronoob commented Sep 28, 2019

Description

Screenshot and/or logs if applicable

Roasbeef commented Oct 23, 2019

andronoob commented Oct 23, 2019

Roasbeef commented Oct 23, 2019 via email

andronoob commented Oct 23, 2019 • edited Loading

andronoob commented Oct 23, 2019 • edited Loading

githorray commented Oct 24, 2019

githorray commented Oct 25, 2019

githorray commented Oct 25, 2019

andronoob commented Oct 23, 2019 •

edited

Loading

andronoob commented Oct 23, 2019 •

edited

Loading