Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / December 2006

Tip: Looking for answers? Try searching our database.

SslStream.AuthenticateAsClient is slow (calling the RemoteCertificateValidationCallback)

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
davidkclark@gmail.com - 21 Dec 2006 14:24 GMT
Hello,

I have a very simple SslStream interaction with another vendor's server
software. Their certificate is self signed so I have implemented a
RemoteCertificateValidationCallback to ignore the error that this
generates.

In testing, the call to AuthenticateAsClient takes about 400ms (ie my
code in the callback has control about 400ms after the call to
authenticate). However in production there is often (4 out of 5 times)
a delay of 15s. (The other one time the delay is a fairly regular 400
or 500ms) The server is running on the same machine as the client, same
network interface, there does not appear to be any outgoing network
traffic during this phase.

Has anyone seen this before? Does anyone have any idea what might cause
this? Two of the test machines (where it works in less than 1s) are
exactly the same hardware as the production machine.

Other ideas for how to get a finer grained debugging on what is going
on in those 15s would also be useful.

Thanks.
Dominick Baier - 21 Dec 2006 19:18 GMT
This may be related to some CRL checking that is done....

You can turn on tracing for SslStream - this may give you more pointers

http://www.leastprivilege.com/TracingSystemNet.aspx

-----
Dominick Baier (http://www.leastprivilege.com)

> Hello,
>
[quoted text clipped - 19 lines]
>
> Thanks.

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.