-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
3.4.6.0 check for update error #3306
Comments
duplicate of something already issued. |
Yes there are reports that somehow our http code fails on win7. Could you provide the logs from latest pre-release (https://www.sumatrapdfreader.org/prerelease):
This should launch a text editor with logs. Could you post the logs here? This would help me understand where the code fails. |
Yeah, did as you asked for, here is the contents of log:
|
Please note that exe did not create the above mentioned crashinfo dir |
Could you re-try with latest pre-release 15322 or later? I've made a change that has a some chance of fixing this on win7 but I don't have access to win7 for testing myself. |
Could you hint me where could I get the built version you asked for? |
https://www.sumatrapdfreader.org/prerelease If it shows an older version than 15322, refresh the page |
Thanks! executed same steps, looks like same issue:
|
Error code 2 (The system cannot find the file specified.) is a bit misleading... Could we try instead this WinAPI? InternetGetLastResponseInfo. |
I've added logging with InternetGetLastResponseInfo, should be in 15323 but I've run out of ideas. Maybe it would help if I re-wrote http download with https://learn.microsoft.com/en-us/windows/win32/winhttp/using-winhttp Someone suggested that the issue is that Win7 doesn't support SSL ciphers that cloudflare uses and the update file is hosted on my website proxied by cloudflare. A reference to similar problem: https://community.cloudflare.com/t/fix-error-ssl-version/361867 If that's the case I'm not sure switching to a different windows api will help. Chrome might work because they have their own http stack written from scratch. A fix could be to have multiple locations for https://www.sumatrapdfreader.org/updatecheck-pre-release.txt, at least one of them not on a website proxied by cloudflare. But then also downloading the .exe for auto-update won't work and I don't want to provide multiple locations for those because those are big files. Or maybe I need to reconfigure sumatra website as described in https://community.cloudflare.com/t/community-tip-fixing-err-ssl-version-or-cipher-mismatch-in-google-chrome/42162 |
I've tried a fresh build, but I do not see any extra error info.. Does it mean that I do not hit the "if (err == ERROR_INTERNET_EXTENDED_ERROR)" condition?
|
Am I right supposing that you are using same WinAPI that old IE is using? the quesiton is: what is the cipher suite your server is using, is it TLS1.3 only? PS I still would like to see a real error code not just 2 as HttGet() is reporting back.. |
hmmm |
@greenozon Could you try to access https://sumatra-website.onrender.com/free-pdf-reader in ie11 and see if it can be seen? I'm trying to figure out if its my Cloudflare settings or Cloudflare in general.
Yes, that would be my guess. |
Out of curiosity, I've tried curl util under Win7 - works fine, but it shows a worrying fact - usage of TLS 1.3 ... :(
|
But, I"m confused even more - when I tried to curl your 2nd site (as on the picture above which works in IE)
|
Could you re-try https://www.sumatrapdfreader.org/prerelease in ie11? I've changed Cloudflare settings to only DNS vs. proxying. I'm afraid the nuances of TLS are above my head. The thing is, both addresses are the same site and both are behind Cloudflare. I run the website on render.com and sumatra-website.onrender.com is the domain name managed by render.com. The thing is, they use cloudflare as a proxy for that. I then use cloudflare DNS to map www.sumatrapdf.org to sumatra-website.onrender.com. I chose to proxy mode for that where browser http requests goes to cloudflare and cloudflare does http request to sumatra-website.onrender.com and returns that result. I don't see why this should break things. I've used default cloudflare settings. So now I've changed cloudflare to just do DNS so browser http request should go straight to sumatra-website.onrender.com |
OK, I spent some time by asking one SSL analyzer web site to query both your web sites working site (IE11/W7 = OK) non-working site (IE11/W7 = ERROR) SUMMARY - the 2nd site is missing the following cipher in TLS1.2 suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) I believe once you configure it (or make cipher list same as on 1st site) |
Thanks for digging in ssltest link. I'll fiddle with cloudflare settings to hopefully find a way to make them win7 compatible. I'm having trouble finding instructions but at least now I can re-test if it works myself with ssltest tool. |
Good luck! |
Some notes: https://community.cloudflare.com/t/ssl-problem-in-some-old-pc/398463/4 I disabled and re-enabled Universal SSL. Didn't help or maybe I didn't wait long enough. https://community.cloudflare.com/t/missing-ciphers-after-moving-to-cloudflare/3803/2 - says needs "Dedicated SSL certificate" (but it's 2017 so maybe it's "Advanced Certificate" https://community.cloudflare.com/t/acm-lets-encrypt-certificate-does-not-include-rsa/206965/4 I tried https://developers.cloudflare.com/api/operations/zone-settings-change-ciphers-setting with value: [] but got rejected with ""Advanced Certificate Manager is required to set custom cipher suites"" |
I ordered "advanced certificate". Now changing ciphers settings worked but will it actually work? |
I see that your site now resolves to 6 IP addresses (3 IPv6 and 3 IPv4) https://www.ssllabs.com/ssltest/analyze.html?d=www.sumatrapdfreader.org&s=104.26.9.244 |
Yeah. I did generate a new certificate and removed the old one in Cloudflare dashboard but the old one is still showing up in those tests. You can tell because the Issuer of the old one is R3 (Let's Encrypt) and the new one should be DigiCert. I'm hoping this is just a caching issue (i.e. the old certificate is still on Cloudflare's edge servers) and will solve itself. Various comments suggest it could take hours to propagate certificates. I'll re-check tomorrow. |
Today I tried updating Sumatra again. I uninstalled Sumatra and installed this version from your pre release page: I tried updating it. The other programs I mentioned I know very little about program code and nothing of the detail behind these things, but I note that the error message says You said that you do not have a Windows 7 computer available for testing these things. Again, thank you for your excellent Sumatra PDF reader. Minor off topic things I found today. Sumatra installation puts a shortcut on the desktop, with no prior permission request. In the About popup the version text at top right is not selectable and not copyable. |
The issue is with certificates that combination of CloudFlare / render.com creates for sumatrapdfreader.org. Unfortunately I have no control over that. I can fix it by also hosting on some other website and checking both versions, but it wouldn't fix the issue for existing installations. |
@LaurieWilliams5066 On my windows 7 netbook If I ask for "update" I am told 15345 is available and am taken to pre-release address HOWEVER that will not display anything since I have commented in the past that IE cannot handle sumatraPDF.org addresses so I get there This page can't be displayed I have to switch to slower Edge which then says Edge is not supported on Windows 7 What the Heck are MS upto? @kjk That was unexpected for 32 bit have you added 32bit back into pre-release? its not showing here in Win 10 nor 7 Edge so I guess its a "legacy" thing. Switching to old Win 7 64 bit unit Same issue I am told there is an update but Internet Explorer cannot show the Page, but Edge is not installed on that machine so cant see the 64bit to update !! so defeats the object of this exercise to attempt to auto-update that portable copy, lets see if there is an installed version.? Hmm Microsoft want to install Edge now MS Secure says Edge Setup can harm my Computer !!!!!!!!!!! |
@kjk |
@LaurieWilliams5066 Could you check with latest pre-release version 15364 or later? I've added code to check for update in additional website which should have a certificate that win7 / win8 should understand but can't be sure unless someone verifies it works on win7. |
@kjk will try and test 64 bit |
@kjk with pre-rel as shown win 7 64 bit home (very slow as this unit is mothballed, failing battery and crawls at about 5% speed) I can see it needs update but internet site is not accessible via trident, |
Thanks for verifying. No need to check 3.4.6, the fix will only be in pre-release. |
hy! Today I updated to the newest version (3.4.6 64bit) and if I check for update I got the same error: Can't connect to the Internet (error 0x2). Win7 Ultimate x64 SP1 |
@csengh that is correct as per the comment No need to check 3.4.6, the fix will only be in pre-release. |
I don't understand why don't need to check for update, sometime I want to check and if I have the latest version, I expect to get a response like : You have the latest version, not Can't connect to the Internet (error 0x2). |
@csengh Windows compiled apps relied heavily on MS Trident comms features such as ftp:, mailto:, SSL1, Samba, (all of which disappear/get modified over time) Win 7 is dead and its methods not maintained |
Help -> Check for update showing this error:
SumatraPDF Update
Can't connect to the Internet (error 0x2).
OK
Win7 x64 SP1
PS of course internet is fully functional :)
The text was updated successfully, but these errors were encountered: