Options
QAP search for updates generate two errors in Event Log
- QAP search for updates generate two errors in Event Log
-
QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 07:42
Every time QAP searches for updates, either automatically at startup, or either manually clicking on "Check Now" in General tab of settings, two "fatal" errors are logged into the event log (see details just below).
According to my searches on Google, this is relative to use of TLS 1.0.... but I don't know more.
Reproducible in 100% of cases
No visible problem (other than presence of error in event log). In particular, version checking itself works fine
I'm wrong ! Actually, there is another (major...) associated problem, indeed : QAP doesn't detect new versions !
I was answered that 9.4.1.5 was the latest rev....
I have then downloaded and installed the 9.5.2, but issue is still there.
Win 7 64bits
QAP 9.4.1.5 9.5.2 (setup / 64bits)
==== Copy of details from EventLog (in french....) ========================
Nom du journal :System
Source : Schannel
Date : 31/07/2019 14:02:49
ID de l’événement :36887
Catégorie de la tâche :Aucun
Niveau : Erreur
Mots clés :
Utilisateur : Système
Ordinateur : Dell-Laurent
Description :
L’alerte fatale suivante a été reçue : 70.
XML de l’événement :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
<EventID>36887</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-07-31T12:02:49.938203800Z" />
<EventRecordID>812157</EventRecordID>
<Correlation />
<Execution ProcessID="768" ThreadID="8124" />
<Channel>System</Channel>
<Computer>Dell-Laurent</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="AlertDesc">70</Data>
</EventData>
</Event>
Nom du journal :System
Source : Schannel
Date : 31/07/2019 14:02:50
ID de l’événement :36887
Catégorie de la tâche :Aucun
Niveau : Erreur
Mots clés :
Utilisateur : Système
Ordinateur : Dell-Laurent
Description :
L’alerte fatale suivante a été reçue : 40.
XML de l’événement :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
<EventID>36887</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-07-31T12:02:50.312603800Z" />
<EventRecordID>812158</EventRecordID>
<Correlation />
<Execution ProcessID="768" ThreadID="8124" />
<Channel>System</Channel>
<Computer>Dell-Laurent</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="AlertDesc">40</Data>
</EventData>
</Event> -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 09:23
Hi Laurent,
Thanks for reporting this. I understand this is not a major issue because the check for update command works as expected. But this merits some research.
Jean -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 09:26
Hi again,
I just saw your update. With QAP v9.5.2, do you get an error message from QAP saying this: "An error occurred while accessing the latest version number. Checking for update interrupted." ?
Jean -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 09:32
Hi Jean,
no error message. Only the answer "You have the latest version : 9.5.2"... which is true, this time, and then we cannot know if QAP actually accessed to the server or not.
But the two "fatal errors" are generated in event log... which let me suppose (but no proof) it didn't reach it.... -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 09:56
(2019-07-31 09:32)LaurentG Wrote: Hi Jean,
no error message. Only the answer "You have the latest version : 9.5.2"... which is true, this time, and then we cannot know if QAP actually accessed to the server or not.
But the two "fatal errors" are generated in event log... which let me suppose (but no proof) it didn't reach it....
If QAP was not receiving an answer because of this error, it would display the "An error occurred while accessing the latest version number..." error message. If it says you have the latest version, it is that the request received an answer.
You can check what QAP receives by using this link: https://www.quickaccesspopup.com/latest/...sion-4.php
Today, the answer is: [[9.5.2|9.9.2.9|0.0.0]] (9.5.2 being the latest public version)
All I could see that would explain why QAP would be mislead is that a cached answer with old version numbers would be returned to QAP instead of the actual content of the query.
Jean -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 10:20
Hi Jean,
Was the way the new versions availability were checked different in 9.4.1.5 ?
I don't think so and then, I do not believe one second to hypothesis of "cached answer", because my laptop is restarted at least once a day, and then startup of QAP (9.4.1.5) did this request of "new version" unsuccessfully a lot of times since June 12th when you released 9.5...
And second comment : link you provide me gives expected answer, OK.... but DOES NOT generate the two errors in eventlog...
As a result, either "Check now" does NOT send the same request, or at least does not sent it the same way, since with "Check now" we get the two errors. -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 10:49
> Was the way the new versions availability were checked different in 9.4.1.5 ?
No. This has not changed since beginning of Folders Popup.
> I don't think so and then, I do not believe one second to hypothesis of "cached answer", because my laptop is restarted at least once a day
If it was cached (and I would be surprised if it was - but, as I said, it is the only explanation to the scenario you described), it could be cached on a server, proxy, etc. not necessarily on your laptop.
> And second comment : link you provide me gives expected answer, OK.... but DOES NOT generate the two errors in eventlog...
Then, the error would be generated by the Windows component called by QAP to do the web request (WinHttp.WinHttpRequest.5.1). This is what I will investigate. -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 11:12
FYI I just did a test on another Laptop, either in Win7, but 32bits this one, on which a "non latest" version (9.4.1.1) is installed, but not very frequently run : Same issue, ie. same errors in EventLog, "Check now" that answers "Vous avez la version la plus récente : 9.4.1.1", while your URL provides the "right" answer : [[9.5.2|9.9.2.9|0.0.0]] -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 11:15
Are these two computers running on the same network? Did you try it on different internet connection (home vs work, for example)? -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 11:59
Yes, they are.
But I just did the test to change network of the 64bits one, switching from ADSL box to my smartphone configured as access point : same behaviour.
About WinHttp, I just had a look on it on docs.microsoft.com.... in which they are talking a lot about Win XP, Win XP SP2, etc... but not even a line about Win 7 or Win 10. Isn't it a deprecated tool ?
Moreover, I read that :
The following features were added in version 5.1 of WinHTTP:
...
Secure Sockets Layer (SSL) functionality, including client certificates. Supported SSL protocols include the following: SSL 2.0, SSL 3.0, and Transport Layer Security (TLS) 1.0.
...
And, indeed, what I read about "SChannel fatal error 40 en 70" (the errors raised in Eventlog) is that they are linked to TLS 1.0...
Maybe a "piste à creuser" (sorry for other readers than Jean, but I don't know the similar expression in english...)
I've found something really interresting....
Please have a look onto https://support.microsoft.com/en-us/help...cols-in-wi
I'm not sure to understand everything (more exact : I'm sure to DO NOT understand everything
), but I've been particularily interrested in the paragraph "How the DefaultSecureProtocols registry entry works"
And I have created the (new, didn't exist before) value DefaultSecureProtocols in registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp (and HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp on 64b laptop) and set its value to x800 (ie. enable TLS 1.2 by default).....
and BINGO ! QAP version checking works ! No more errors in Eventlog, and 9.4.1.1 no more supposed to be up to date
I don't know what you have to do to avoid that other users have to update manually, as I did, their registry, but I'm confident that a detailed reading of support.microsoft.com/en-us/help/3140245 will give you the answer.
In the mean time, I revert my updates, waiting for the final solution you will provide.
Bonne lecture, et bon courage ! -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-07-31 13:20
I just want to specify that I didn't have to install the KB3140245... since it was already automatically installed by Win Update for very long time on both my laptops....
Nevertheless, the registry entry DefaultSecureProtocols didn't exist. -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-07-31 15:49
Thanks for the info, Laurent. And for the additional info in your PM. This could be related to the installation of the SSL protocol on my server (one year ago). I'll be back on this. -
RE: QAP search for updates generate two errors in Event Log
Jean Lalonde > 2019-08-02 07:00
A follow-up on this topic after additional test with Laurent.
QAP is now using a more recent component to query the web server. On system where the old protocol TLS 1.0 is still enabled, this produces a pair of errors in the event log but Windows catch-up after the error and produce the expected result. To avoid the error, user can enter the registry key identified by Laurent at the end of the previous message to bypass TLS 1.0 and use TLS 1.2.
Also, I added a some code to avoid cached pages which is the only explanation why QAP would report to be up to date when it is not.
Thanks Laurent for your help on this!
Jean -
RE: QAP search for updates generate two errors in Event Log
LaurentG > 2019-08-02 12:43
You're welcome, Jean. It was a pleasure to work together with you and bring my little contribution to enhance your super tool !