Skip to content
Snippets Groups Projects
Commit 3afaaa7a authored by chengr28's avatar chengr28
Browse files

2014-09-08

New certifications and fix some batch bugs.
parent 573cf09b
No related branches found
No related tags found
No related merge requests found
...@@ -3,12 +3,15 @@ ...@@ -3,12 +3,15 @@
Anti China Certifications. Anti China Certifications.
### 版本 ### 版本
Last updated on **2014-09-07** Last updated on **2014-09-08**
### 使用方法 ### 使用方法
* Windows(System) * Windows(System)
* Base 版本**以管理员身份运行** AntiChinaCerts(Base).bat * Base 版本 **以管理员身份运行** AntiChinaCerts_Base.bat
* Extended 版本**以管理员身份运行** AntiChinaCerts(Extended).bat * Extended 版本 **以管理员身份运行** AntiChinaCerts_Extended.bat
* Windows(Firefox)
* `工具` - `选项` - `高级` - `证书` - `查看证书`
* 点击需要禁用的证书,直接点击 `删除或不信任` 按钮即可
* Android * Android
* `设置` - `安全` - `受信任的凭据(显示受信任的CA证书)` * `设置` - `安全` - `受信任的凭据(显示受信任的CA证书)`
* 点击需要禁用的证书并下拉到最下面,点击 `禁用` 即可 * 点击需要禁用的证书并下拉到最下面,点击 `禁用` 即可
...@@ -18,22 +21,33 @@ Last updated on **2014-09-07** ...@@ -18,22 +21,33 @@ Last updated on **2014-09-07**
* 本工具作用是先将列表中的CA根证书删掉,然后再将这些证书添加到CRL证书吊销列表中,CRL证书吊销列表中的证书才会被彻底禁用 * 本工具作用是先将列表中的CA根证书删掉,然后再将这些证书添加到CRL证书吊销列表中,CRL证书吊销列表中的证书才会被彻底禁用
* Extended 版本为 Base 版本扩展,添加另外几个CA根证书 * Extended 版本为 Base 版本扩展,添加另外几个CA根证书
* 使用前可使用 Microsoft_Fixit_20135.diagcab(Win7以及之后) 或者 Microsoft_Fixit_51014.msi(Vista以及之前) 重置证书列表,**不过大多数情况下并不需要** * 使用前可使用 Microsoft_Fixit_20135.diagcab(Win7以及之后) 或者 Microsoft_Fixit_51014.msi(Vista以及之前) 重置证书列表,**不过大多数情况下并不需要**
* 使用前 **强烈建议以管理员身份运行自带的RootSUPD** 更新系统的证书列表 * 使用前 **强烈建议以管理员身份运行自带的 RootSUPD** 更新系统的证书列表
* Windows(Firefox)
* 最新 32 版本自带有 CNNIC ROOT 以及 China Internet Network Information Center EV Certificates Root
* Android * Android
* 最新 4.4.4 系统自带有 CNNIC ROOT 以及 China Internet Network Information Center EV Certificates Root * 最新 4.4.4 系统自带有 CNNIC ROOT 以及 China Internet Network Information Center EV Certificates Root
* 其它并不随系统附带
### 注意 ### 注意
* Windows(System) * Windows(System)
* **将CA根证书直接删掉是没有任何作用的,下次访问使用该证书的网站时系统又会重新自动联网添加!** * **将CA根证书直接删除没有任何作用,下次访问使用该证书的网站时系统又会重新自动联网添加**
* **因为每个用户使用的证书列表都是独立的,所以需要所有用户都运行一次才能彻底禁用这些证书!** * **由于每个用户使用独立的证书列表,所以需要所有用户都运行一次本工具才能彻底禁用**
* 运行时如果遇到 `Error: Can not find a certificate matching the hash value` 不需要在意,只要后面 `CertMgr Succeeded` 运行成功就行,如果提示错误请检查是否是以管理员权限运行。或者联系作者 * 运行时如果遇到 `Error: Can not find a certificate matching the hash value` 不需要在意,只要后面 `CertMgr Succeeded` 运行成功就行,如果提示错误请检查是否是以管理员权限运行或联系作者寻求帮助
* 运行完毕建议清空所有浏览器数据以及系统SSL缓存
* Windows(Firefox)
* 在 Firefox 里对自带根证书执行 `删除或不信任` 操作就相当于是禁用其所有目的,并不会将根证书本身删除
* Android * Android
* Android 上由于没有提供比较方便的方法编辑CRL列表,所以证书并不能被完全禁用,Apps可以通过忽略证书错误继续使用 * Android 上由于没有提供比较方便的方法编辑CRL列表,所以证书并不能被完全禁用,Apps可以通过忽略证书错误继续使用
* Android 系统没有自带的CA根证书默认为不信任状态,所以不需要手动添加到系统中 * Android 系统没有自带的CA根证书默认为不信任状态,所以不需要手动添加到系统中
* 操作完毕建议清空所有浏览器数据和系统缓存,并重启网络连接
### 涉及的CA根证书 ### 涉及的CA根证书
* Base 版本 * Base 版本
* Fake GitHub.Com(2013-01-25)
* SHA-1 指纹 27A29C3A8B3261770E8B59448557DC9E9339E68C
* 此伪造证书被用于 2013-01-25 大规模中间人攻击 GitHub 网站
* Fake Google.Com(2014-07-24)
* SHA-1 指纹 F6BEADB9BC02E0A152D71C318739CDECFC1C085D
* 此伪造证书被用于 2014-09-01 大规模中间人攻击 Google 网站
* CNNIC ROOT * CNNIC ROOT
* SHA-1 指纹 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F * SHA-1 指纹 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F
* 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn) * 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn)
...@@ -42,9 +56,9 @@ Last updated on **2014-09-07** ...@@ -42,9 +56,9 @@ Last updated on **2014-09-07**
* SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E * SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E
* 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn) * 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn)
* [测试网址](https://evdemo.cnnic.cn) * [测试网址](https://evdemo.cnnic.cn)
* Extended 版本 * Extended 版本扩展
* ROOTCA * ROOTCA
* SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E * SHA-1 指纹 DBB84423C928ABE889D0E368FC3191D151DDB1AB
* 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密码管理办公室](http://www.oscca.gov.cn) * 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密码管理办公室](http://www.oscca.gov.cn)
* 测试:打开 Certs 目录中 CFCA_CS_SM2_OCA11 证书,该证书由 ROOTCA 交叉签署认证 * 测试:打开 Certs 目录中 CFCA_CS_SM2_OCA11 证书,该证书由 ROOTCA 交叉签署认证
* CFCA GT CA * CFCA GT CA
...@@ -65,7 +79,7 @@ Last updated on **2014-09-07** ...@@ -65,7 +79,7 @@ Last updated on **2014-09-07**
* UCA EV Root * UCA EV Root
* SHA-1 指纹 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E * SHA-1 指纹 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E
* 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com) * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com)
* 观察中的CA根证书(**这些证书没有被工具禁用** * 观察中**并无被本工具禁用**
* SRCA * SRCA
* 本证书由其自行颁发,没有经过任何符合国际标准的国际事务所进行审计 * 本证书由其自行颁发,没有经过任何符合国际标准的国际事务所进行审计
* SHA-1 指纹 AE3F2E66D48FC6BD1DF131E89D768D505DF14302 * SHA-1 指纹 AE3F2E66D48FC6BD1DF131E89D768D505DF14302
......
:: AntiChinaCerts Base batch
:: Anti China Certifications.
::
:: Author: Chengr28
::
@echo off
:: Permission check
if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
rd "%SystemPath%\test_permissions" > nul 2 > nul
md "%SystemPath%\test_permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
rd "%SystemPath%\test_permissions" > nul 2 > nul
cls
:: Delete certifications(Base)
cd /d %~dp0/Certs
:: CNNIC ROOT
certmgr /del /c /sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F /s Root
:: China Internet Network Information Center EV Certificates Root
certmgr /del /c /sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E /s Root
@echo.
:: Add certifications to CRL.
:: Base
certmgr /add /c CNNIC_ROOT.cer /s Disallowed
certmgr /add /c China_Internet_Network_Information_Center_EV_Certificates_Root.cer /s Disallowed
:: Print to screen.
@echo.
@echo Done. Please confirm the messages on screen.
@echo.
@pause
:: AntiChinaCerts Extended batch
:: Anti China Certifications.
::
:: Author: Chengr28
::
@echo off
:: Permission check
if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
rd "%SystemPath%\test_permissions" > nul 2 > nul
md "%SystemPath%\test_permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
rd "%SystemPath%\test_permissions" > nul 2 > nul
cls
:: Delete certifications(Base)
cd /d %~dp0/Certs
:: CNNIC ROOT
certmgr /del /c /sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F /s Root
:: China Internet Network Information Center EV Certificates Root
certmgr /del /c /sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E /s Root
:: Delete certs(Extended)
:: ROOTCA
certmgr /del /c /sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB /s Root
:: CFCA GT CA
certmgr /del /c /sha1 EABDA240440ABBD694930A01D09764C6C2D77966 /s Root
:: CFCA EV ROOT
certmgr /del /c /sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 /s Root
:: UCA Global Root
certmgr /del /c /sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF /s Root
:: UCA Root
certmgr /del /c /sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 /s Root
:: UCA EV Root
certmgr /del /c /sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E /s Root
@echo.
:: Add certifications to CRL.
:: Base
certmgr /add /c CNNIC_ROOT.cer /s Disallowed
certmgr /add /c China_Internet_Network_Information_Center_EV_Certificates_Root.cer /s Disallowed
:: Extended
certmgr /add /c ROOTCA.cer /s Disallowed
certmgr /add /c CFCA_GT_CA.cer /s Disallowed
certmgr /add /c CFCA_EV_ROOT.cer /s Disallowed
certmgr /add /c UCA_Global_Root.cer /s Disallowed
certmgr /add /c UCA_Root.cer /s Disallowed
certmgr /add /c UCA_EV_Root.cer /s Disallowed
:: Print to screen.
@echo.
@echo Done. Please confirm the messages on screen.
@echo.
@pause
:: AntiChinaCerts Base batch
:: Anti China Certifications.
::
:: Author: Chengr28
::
@echo off
:: Permission check
if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
::md "%SystemPath%\Test_Permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
del /f /q %SystemPath%\TestPermission.log
echo "Permission check." >> %SystemPath%\TestPermission.log
if not exist %SystemPath%\TestPermission.log (echo Require Administrator Permission. && pause > nul && Exit)
del /f /q %SystemPath%\TestPermission.log
cls
cd /d %~dp0\Certs
:: Architecture check
if "%PROCESSOR_ARCHITECTURE%%PROCESSOR_ARCHITEW6432%" == "x86" (goto X86) else goto X64
:X86
:: Delete certifications(Base)
:: Fake GitHub.Com(2013-01-25)
CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
:: Fake Google.Com(2014-07-24)
CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
:: CNNIC ROOT
CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
:: China Internet Network Information Center EV Certificates Root
CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
@echo.
:: Add certifications to CRL(Base)
CertMgr_x86 -add -c FakeGitHubCom_2013_01.cer -s Disallowed
CertMgr_x86 -add -c FakeGoogleCom_2014_07.cer -s Disallowed
CertMgr_x86 -add -c CNNIC_ROOT.cer -s Disallowed
CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
goto Exit
:X64
:: Delete certifications(Base)
:: Fake GitHub.Com(2013-01-25)
CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
:: Fake Google.Com(2014-07-24)
CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
:: CNNIC ROOT
CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
:: China Internet Network Information Center EV Certificates Root
CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
@echo.
:: Add certifications to CRL(Base)
CertMgr -add -c FakeGitHubCom_2013_01.cer -s Disallowed
CertMgr -add -c FakeGoogleCom_2014_07.cer -s Disallowed
CertMgr -add -c CNNIC_ROOT.cer -s Disallowed
CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
:Exit
:: Print to screen.
@echo.
@echo Done. Please confirm the messages on screen.
@echo.
@pause
:: AntiChinaCerts Extended batch
:: Anti China Certifications.
::
:: Author: Chengr28
::
@echo off
:: Permission check
if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
::md "%SystemPath%\Test_Permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
del /f /q %SystemPath%\TestPermission.log
echo "Permission check." >> %SystemPath%\TestPermission.log
if not exist %SystemPath%\TestPermission.log (echo Require Administrator Permission. && pause > nul && Exit)
del /f /q %SystemPath%\TestPermission.log
cls
cd /d %~dp0\Certs
:: Architecture check
if "%PROCESSOR_ARCHITECTURE%%PROCESSOR_ARCHITEW6432%" == "x86" (goto X86) else goto X64
:X86
:: Delete certifications(Base)
:: Fake GitHub.Com(2013-01-25)
CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
:: Fake Google.Com(2014-07-24)
CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
:: CNNIC ROOT
CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
:: China Internet Network Information Center EV Certificates Root
CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
:: Delete certifications(Extended)
:: ROOTCA
CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot
:: CFCA GT CA
CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root
CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot
:: CFCA EV ROOT
CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root
CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot
:: UCA Global Root
CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root
CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
:: UCA Root
CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
:: UCA EV Root
CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
@echo.
:: Add certifications to CRL(Base)
CertMgr_x86 -add -c FakeGitHubCom_2013_01.cer -s Disallowed
CertMgr_x86 -add -c FakeGoogleCom_2014_07.cer -s Disallowed
CertMgr_x86 -add -c CNNIC_ROOT.cer -s Disallowed
CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
:: Add certifications to CRL(Extended)
CertMgr_x86 -add -c ROOTCA.cer -s Disallowed
CertMgr_x86 -add -c CFCA_GT_CA.cer -s Disallowed
CertMgr_x86 -add -c CFCA_EV_ROOT.cer -s Disallowed
CertMgr_x86 -add -c UCA_Global_Root.cer -s Disallowed
CertMgr_x86 -add -c UCA_Root.cer -s Disallowed
CertMgr_x86 -add -c UCA_EV_Root.cer -s Disallowed
goto Exit
:X64
:: Delete certifications(Base)
:: Fake GitHub.Com(2013-01-25)
CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
:: Fake Google.Com(2014-07-24)
CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
:: CNNIC ROOT
CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
:: China Internet Network Information Center EV Certificates Root
CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
:: Delete certifications(Extended)
:: ROOTCA
CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot
:: CFCA GT CA
CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root
CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot
:: CFCA EV ROOT
CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root
CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot
:: UCA Global Root
CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root
CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
:: UCA Root
CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
:: UCA EV Root
CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
@echo.
:: Add certifications to CRL(Base)
CertMgr -add -c FakeGitHubCom_2013_01.cer -s Disallowed
CertMgr -add -c FakeGoogleCom_2014_07.cer -s Disallowed
CertMgr -add -c CNNIC_ROOT.cer -s Disallowed
CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
:: Add certifications to CRL(Extended)
CertMgr -add -c ROOTCA.cer -s Disallowed
CertMgr -add -c CFCA_GT_CA.cer -s Disallowed
CertMgr -add -c CFCA_EV_ROOT.cer -s Disallowed
CertMgr -add -c UCA_Global_Root.cer -s Disallowed
CertMgr -add -c UCA_Root.cer -s Disallowed
CertMgr -add -c UCA_EV_Root.cer -s Disallowed
:Exit
:: Print to screen.
@echo.
@echo Done. Please confirm the messages on screen.
@echo.
@pause
No preview for this file type
File added
File added
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
File added
File added
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment