XP SP2/IE 6 Generic Trust Issue

[Jeff B]

I am trying to run a program downloaded from a cab file via an applet.
With XP SP1 I had no problems. With XP SP2 I get the following error
in my Temporary Interent Files directory:

*** Code Download Log entry (02 Dec 2004 @ 08:30:25) ***
Code Download Error: (hr = 800b010b) Generic trust failure.

Operation failed. Detailed Information:
CodeBase: https://www-ais-dev.llnl.gov/llnl_only/apps/extensity/ext40.cab
CLSID: Extensity
Extension:
Type:

LOG: Reporting Code Download Completion: (hr:800b010b (FAILED),
CLASSID: 0..., szCODEhttps://www-ais-dev.llnl.gov/llnl_only/apps/extensity/ext40.cab),
MainTypenull), MainExtnull))
--- Detailed Error Log Follows ---
LOG: Download OnStopBinding called (hrStatus = 0 / hrResponseHdr = 0).
LOG: URL Download Complete: hrStatus:0, hrOSB:800b010b,
hrResponseHdr:0, URLhttps://www-ais-dev.llnl.gov/llnl_only/apps/extensity/ext40.cab)
LOG: Reporting Code Download Completion: (hr:800b010b (FAILED),
CLASSID: 0..., szCODEhttps://www-ais-dev.llnl.gov/llnl_only/apps/extensity/ext40.cab),
MainTypenull), MainExtnull))

I tried putting the web site listed into my IE6 trusted sites list.
If I now try to access the file, I get a dialog box saying the
publisher could not be verified and asking Do I want to install and
run the software? If I click the button to install and run the
software nothing gets installed and I get a new copy of the same error
message in my Temporary Internet Files.

How can I get this to run?

 

[Mark L. Ferguson]

I would try setting the security lower. IE, tools, options, security tab,
'custom level' button

 

[buschnotbush]

have found the cause of the problem, but it is not anything that
anyone mentioned.

I was trying to download and run an activex control (cab file) signed
with an expired certificate.

Windows has a registry setting (new in SP2) to designate if unsigned
activex controls should be downloaded. Unfortunately IE ignores the
registry setting and blocks the download no matter what the registry is
set to.

The registry setting is HKCU{LM}\Software \
Microsoft \
Internet Explorer\
Download\
RunInvalidSignatures

I got the cab file re-signed with a current certificate and it works.

Anyone know how I report the bug to Microsoft without paying? Their web
site put me in an endless loop.