Re: Problem in running .Net Service on a Quad Processor

Hi Willy,
Yes, I am loadin a signed assembly...could you suggest recommend
possible solutions...I found a couple of them
1. A simple solution to the CRL check overhead is to use authenticode
certificates that don't have a CDP embedded in them. Of course, this
generally implies a self-signed cert, Is this an acceptable compromise?
2. Write a thin native layer which is the signed entry point, and
delegates to managed code to do the rest of the work as another option.


What do you suggest?

Thanks & regards
Sunil

Willy Denoyette [MVP] wrote:
<sunil@xxxxxxxxxxxxxxx> wrote in message
news:1168867642.662188.168860@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi Willy,
Finally I could find a solution to this problem...this seems to be
related to Windows2003 Server sp1...
I set the value of the registry value 'State' under the following
registry key as '23e00'.
KEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust
Providers\Software Publishing
and my Service started within a few seconds...no code changes done..I
guess this is something to do with digital signature/ security...Can
someone throw some light on this issue?


Are you running/loading Certificate assigned assemblies? If this is true (I wonder why), you
need to make sure you have an internet connection. This because the CLR will try to download
the CRL (Certificate Revocation List) while checking the signature. By tweaking the registry
you did disable the download of CRL's for the whole system.

Willy.

.

Relevant Pages

  • Re: Stand Alone CA Problem
    ... > the CRL from the CDP fast enough and times out. ... > download is usually many times faster. ... >> and imported it in my certificate store. ...
    (microsoft.public.win2000.security)
  • Re: Stand Alone CA Problem
    ... Unless the CRL is valid for a very long time (which is normally a bad ... download is usually many times faster. ... > and imported it in my certificate store. ... In the Edit Trust ...
    (microsoft.public.win2000.security)
  • Re: Certificate Revocation List (CRL) problem w/ Outlook XP
    ... Or use Outlook XP, it checks CRL by default. ... > the Signing Certificate using Outlook Clients. ... >> can turn it off via a registry hack if you like. ...
    (microsoft.public.security)
  • Re: Stand Alone CA Problem
    ... you download the Internet Explorer 5.5 SP2. ... but I DO want the certificate to be checked against a CRL. ... > thus avoiding the warning message altogether. ...
    (microsoft.public.win2000.security)
  • Re: Stand Alone CA Problem
    ... Microsoft Outlook 2002 SP-2 ... > you download the Internet Explorer 5.5 SP2. ... but I DO want the certificate to be checked against a CRL. ...
    (microsoft.public.win2000.security)