Copy link to clipboard
Copied
Hi,
I'm trying to setup an internal update server according to the instructions provided in the Flash Player Administration Guide but I'm having some trouble.
Here is the FlashInstall.log:
2015-2-4+19-12-14.562 [info] 1628 my.local.server
2015-2-4+19-12-14.612 [info] 1629 my.local.server
2015-2-4+19-12-14.615 [info] 1614
2015-2-4+19-12-14.617 [info] 1615
2015-2-4+19-12-14.619 [info] 1618
2015-2-4+19-12-14.621 [info] 1619 1063
2015-2-4+19-12-14.650 [info] 1628 my.local.server
2015-2-4+19-12-14.653 [info] 1629 my.local.server
2015-2-4+19-12-14.656 [info] 1614
2015-2-4+19-12-14.659 [info] 1615
2015-2-4+19-12-14.660 [info] 1618
2015-2-4+19-12-14.663 [info] 1604
2015-2-4+19-12-14.663 [info] 1608
2015-2-4+19-12-14.678 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml
2015-2-4+19-12-14.813 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/version.xml
2015-2-4+19-12-14.816 [info] 1632
2015-2-4+19-12-14.816 [info] 1632
2015-2-4+19-12-14.816 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml
2015-2-4+19-12-14.818 [warning] 1445
2015-2-4+19-12-14.818 [info] 1632
2015-2-4+19-12-14.819 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml
2015-2-4+19-12-14.820 [warning] 1445
2015-2-4+19-12-14.821 [info] 1632
2015-2-4+19-12-14.822 [info] 1600
2015-2-4+19-12-14.829 [error] 1217 -2146881269
2015-2-4+19-12-14.831 [error] 1234 183
2015-2-4+19-12-14.833 [info] 1612
2015-2-4+19-12-14.836 [info] 1620
Here is the Update Server directory tree:
\---pub
\---flashplayer
\---update
\---current
\---sau
| currentmajor.xml
| fp_background_update.log
| fp_background_update.bat
| fp_background_update.cab
|
+---11
| +---install
| | install_all_mac_pl_sgn.z
| | install_all_win_ax_sgn.z
| | install_all_win_pl_sgn.z
| |
| \---xml
| version.xml
|
+---15
| +---install
| | install_all_mac_pl_sgn.z
| | install_all_win_ax_sgn.z
| | install_all_win_pl_sgn.z
| |
| \---xml
| version.xml
|
\---16
+---install
| install_all_mac_pl_sgn.z
| install_all_win_ax_sgn.z
| install_all_win_pl_sgn.z
|
\---xml
version.xml
Here is the client mms.cfg:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
SilentAutoUpdateServerDomain=my.local.server
SilentAutoUpdateVerboseLogging=1
I have verified the computer trusts the SSL certificate and I can successfully browse the update site:
I have verified the cab file downloaded from Adobe by the server against a cab file I downloaded manually with my browser. Here is the md5sum output for each file:
73fc6ba78ab9660f63b1724f72e07a52 server-fp_background_update.cab
73fc6ba78ab9660f63b1724f72e07a52 browser-fp_background_update.cab
What would be causing the update process to fail? What else can I do to get this working? Am I missing something?
Thanks for your help.
Hi William,
Unfortunately, I'm not able to reproduce the error you are observing, but will continue to investigate. Using a network sniffing utility (such as Wireshark or similar), can you check to see if the installer file is actually being downloaded from the internal server to the machine?
On Mac, the file is FlashPlayerInstallManager.log located in ~/Library/Logs. Log sessions have begin with ---- log start ---- and end with --- log end ----. Some items also log to /private/var/log/install.
...Copy link to clipboard
Copied
Hello,
What are the contents of the fp_background_update.log and fp_background_update.bat files? These files are not included in the fp_background_udpate.cab package.
--
Maria
Copy link to clipboard
Copied
Those files are used by a task for getting the latest CAB file from Adobe.
fp_background_update.bat:
@ECHO OFF
SETLOCAL ENABLEEXTENSIONS
SET TITLE=fp_background_update
SET LOG=.\%TITLE%.log
SET SOURCE=http://download.macromedia.com/pub/flashplayer/current/licensing/win/fp_background_update.cab
SET DESTINATION=D:\AUSST\pub\flashplayer\update\current\sau
ECHO =O====== %date% %time% ======== >> %LOG% 2>&1
IF EXIST %DESTINATION% (
:: Skipping destination folder creation.
) ELSE (
:: Creating destination folder.
mkdir %DESTINATION% >> %LOG% 2>&1
)
:: Downloading files...
BITSADMIN /TRANSFER fp_background_update /DOWNLOAD /PRIORITY NORMAL %SOURCE% %DESTINATION%\fp_background_update.cab >> %LOG% 2>&1
:: Expanding CAB file...
expand %DESTINATION%\fp_background_update.cab -F:* %DESTINATION% >> %LOG% 2>&1
ECHO =X====== %date% %time% ======== >> %LOG% 2>&1
ECHO. >> %LOG% 2>&1
fp_background_update.log:
=O====== Wed 02/04/2015 11:00:05.97 ========
BITSADMIN version 3.0 [ 7.6.9200 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
Transfer complete.
Microsoft (R) File Expansion Utility Version 6.2.9200.16384
Copyright (c) Microsoft Corporation. All rights reserved.
Adding D:\AUSST\pub\flashplayer\update\current\sau\currentmajor.xml to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_mac_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_win_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_win_ax_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\11\xml\version.xml to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_mac_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_win_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_win_ax_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\15\xml\version.xml to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_mac_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_win_pl_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_win_ax_sgn.z to Extraction Queue
Adding D:\AUSST\pub\flashplayer\update\current\sau\16\xml\version.xml to Extraction Queue
Expanding Files ....
Expanding Files Complete ...
13 files total.
=X====== Wed 02/04/2015 11:01:16.71 ========
Copy link to clipboard
Copied
Can you please verify the MD5 hash values of the extracted files, in all 3 directories (/11, /15, & /16) are as follows:
install_all_mac_pl_sgn.z 8B5AA6F09B3A80FC454666466A285371
install_all_win_ax_sgn.z 159C663F58A11FC0C6B93BAA469AF3DA
install_all_win_pl_sgn.z 10C878FA8125C8CBD6FB1AC18A1AA2BD
--
Maria
Copy link to clipboard
Copied
$ md5sum sau/*/install/install_all_*.z
8b5aa6f09b3a80fc454666466a285371 sau/11/install/install_all_mac_pl_sgn.z
159c663f58a11fc0c6b93baa469af3da sau/11/install/install_all_win_ax_sgn.z
10c878fa8125c8cbd6fb1ac18a1aa2bd sau/11/install/install_all_win_pl_sgn.z
8b5aa6f09b3a80fc454666466a285371 sau/15/install/install_all_mac_pl_sgn.z
159c663f58a11fc0c6b93baa469af3da sau/15/install/install_all_win_ax_sgn.z
10c878fa8125c8cbd6fb1ac18a1aa2bd sau/15/install/install_all_win_pl_sgn.z
8b5aa6f09b3a80fc454666466a285371 sau/16/install/install_all_mac_pl_sgn.z
159c663f58a11fc0c6b93baa469af3da sau/16/install/install_all_win_ax_sgn.z
10c878fa8125c8cbd6fb1ac18a1aa2bd sau/16/install/install_all_win_pl_sgn.z
Looks like they all match.
Copy link to clipboard
Copied
Hi William,
Thank you for verifying the hash values. A few more questions: Do you have a proxy server configured? Is you SSL cert self-signed or issued by a CA?
--
Maria
Copy link to clipboard
Copied
No proxy. SSL certificate is issued by our internal PKI ad is trusted by all computers and accounts. Here is the certificate as seen by the NT AUTHORITY\SYSTEM account:
Copy link to clipboard
Copied
Thank you for providing the additional information. It's going to take a bit longer for me to investigate this. I hope to have more information by tomorrow.
--
Maria
Copy link to clipboard
Copied
Ok, thank you.
I'm not sure if this will help but here are the relevant web server log entries that coincide with the latest update check:
u_ex150204.log:
2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/currentmajor.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 200 0 0 378 177 1
2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/version.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 200 0 0 730 179 2
2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/patch.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 404 0 2 202 177 3
2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/patch.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 404 0 64 0 177 18
FlashInstall.log:
2015-2-4+23-6-39.722 [info] 1628 my.local.server
2015-2-4+23-6-39.724 [info] 1629 my.local.server
2015-2-4+23-6-39.726 [info] 1614
2015-2-4+23-6-39.728 [info] 1615
2015-2-4+23-6-39.729 [info] 1618
2015-2-4+23-6-39.731 [info] 1619 1063
2015-2-4+23-6-39.757 [info] 1628 my.local.server
2015-2-4+23-6-39.759 [info] 1629 my.local.server
2015-2-4+23-6-39.761 [info] 1614
2015-2-4+23-6-39.762 [info] 1615
2015-2-4+23-6-39.763 [info] 1618
2015-2-4+23-6-39.765 [info] 1604
2015-2-4+23-6-39.765 [info] 1608
2015-2-4+23-6-39.772 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml
2015-2-4+23-6-39.840 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/version.xml
2015-2-4+23-6-39.842 [info] 1632
2015-2-4+23-6-39.842 [info] 1632
2015-2-4+23-6-39.843 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml
2015-2-4+23-6-39.845 [warning] 1445
2015-2-4+23-6-39.845 [info] 1632
2015-2-4+23-6-39.846 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml
2015-2-4+23-6-39.848 [warning] 1445
2015-2-4+23-6-39.848 [info] 1632
2015-2-4+23-6-39.849 [info] 1600
2015-2-4+23-6-39.856 [error] 1217 -2146881269
2015-2-4+23-6-39.856 [error] 1234 183
2015-2-4+23-6-39.857 [info] 1612
2015-2-4+23-6-39.859 [info] 1620
Copy link to clipboard
Copied
Anything yet? I'd really like to get my network updated with the new version. I checked the FlashInstall.log and it's still got the same output (repeated every hour):
2015-2-5+20-35-0.122 [info] 1628 my.local.server
2015-2-5+20-35-0.347 [info] 1629 my.local.server
2015-2-5+20-35-0.401 [info] 1614
2015-2-5+20-35-0.404 [info] 1615
2015-2-5+20-35-0.407 [info] 1618
2015-2-5+20-35-0.408 [info] 1619 1063
2015-2-5+20-35-0.440 [info] 1628 my.local.server
2015-2-5+20-35-0.443 [info] 1629 my.local.server
2015-2-5+20-35-0.447 [info] 1614
2015-2-5+20-35-0.449 [info] 1615
2015-2-5+20-35-0.450 [info] 1618
2015-2-5+20-35-0.452 [info] 1604
2015-2-5+20-35-0.452 [info] 1608
2015-2-5+20-35-0.453 [info] 1612
2015-2-5+20-35-0.454 [info] 1620
Copy link to clipboard
Copied
Hi William,
I apologize for not responding sooner. I was hoping to get back to you earlier today, however, we actually had a Flash Player release today and I've been busy with tasks relating to that. I'm still investigating your scenario (the main error is that the ActiveX installer signature validation failed, but this seems suspect as it's not being widely reported), however, you may want to download the latest fp_background_update.cab file (containing version 16.0.0.305) and giving that a try.
--
Maria
Copy link to clipboard
Copied
The latest cab has already been downloaded by the update server. Still no joy.
BTW, where is the FlashInstall.log located on OS X? I have some Mac clients as well and I'd like to check on their status.
Copy link to clipboard
Copied
Hi William,
Unfortunately, I'm not able to reproduce the error you are observing, but will continue to investigate. Using a network sniffing utility (such as Wireshark or similar), can you check to see if the installer file is actually being downloaded from the internal server to the machine?
On Mac, the file is FlashPlayerInstallManager.log located in ~/Library/Logs. Log sessions have begin with ---- log start ---- and end with --- log end ----. Some items also log to /private/var/log/install.log file, but there's no easy way to detect the beginning and ending of a log session in this file. To ensure I capture the logs for a given test session, I view both files in the Console app, and insert a marker in the file before I begin testing. This ensures I capture all the logs for a given install and don't miss something.
--
Maria
Copy link to clipboard
Copied
The information you gave about the signature not being verified and suggestion of using Wireshark to investigate led me to a resolution. I didn't have port 80 configured correctly for the host header I'm using. Once I got that sorted things started working. Thanks so much for your help.
Copy link to clipboard
Copied
Can you please describe the details needed to fix the bug.
I have the same problems and don't know how to resolve them.
Thanks.
Copy link to clipboard
Copied
Sure, but I'm not sure it will help.
My issue was with how IIS was configured. I hadn't created the port 80 binding with a proper host header so the update service was only able to connect to the update site on port 443. Once I added the correct host header/port binding on 80 everything started working.
Copy link to clipboard
Copied
Hi William,
I'm glad that you were able to resolve the issue.
--
Maria