Thanks for your followup Leon,
Yes, your response also remind me of a former issue which is caused by the
similiar things. When some of our assemblies are code signed and at the CLR
startup time, the security(cas) policy will try to verfiy the certificate
revorcation list over internet, if the machine's internet connection is not
setup correctly, it'll hangs until timeout.....
Also, there is the "Check for publisher's certificate revocation" setting
in the internet explore's advanced options , when turn off this can also
avoid such checking....
Regards,
Steven Cheng
Microsoft Online Support
Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| From: "Leon Finker" <***@nospam.nospam>
| References: <#YQz4HH$***@TK2MSFTNGP11.phx.gbl>
<#h7PyfH$***@tk2msftngp13.phx.gbl>
<IkzTdpL$***@TK2MSFTNGXA02.phx.gbl>
| Subject: Re: .NET 2.0/csc.exe/SoapHttpClientProtocol hangs for 15-20
seconds (compared to .NET 1.1) under Citrix
| Date: Sun, 11 Dec 2005 23:38:59 -0500
| Lines: 134
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| Message-ID: <#xHV6Xt$***@TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.dotnet.framework.clr
| NNTP-Posting-Host: ool-182d1f3e.dyn.optonline.net 24.45.31.62
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.dotnet.framework.clr:14800
| X-Tomcat-NG: microsoft.public.dotnet.framework.clr
|
| The problem is just as it was in .NET 1.1. It's CRL (cert. revocation
list)
| verification done by wintrust API, which .NET is using. It's timing out.
| However, in .NET 1.1 there probably weren't any authenticode signed
assembly
| dependencies when using SoapHttpClient and csc.exe for XML serialization
| because same code doesn't block under .NET 1.1.
|
| By disabling CRL verification for the user, the problem disappears under
| 2.0. First I see connection being made to crl.microsoft.com and then to
| crl.verisign.com. Both either fail or timeout, but this continues for
good
| ~10 seconds per csc.exe invocation as well as in main host executable.
|
|
| "Steven Cheng[MSFT]" <***@online.microsoft.com> wrote in message
| news:IkzTdpL$***@TK2MSFTNGXA02.phx.gbl...
| > Hi Leon,
| >
| > Welcome to MSDN newsgroup.
| > From your description you're encountering some problem when creating
| > webservice proxy in a .net 2.0 application, which will take long time
with
| > no responding .... ,yes?
| >
| > Are you generating the webservcie proxy through VS2005 or the wsdl.exe
| > tool? Also, I think this should be a service specific behavior. Can you
| > repro the problem through a simplified WSDL document? If so, it'd be
| > helpful if you can provide us this one so that we can have some test on
| > our
| > side...
| >
| > Thanks,
| >
| > Steven Cheng
| > Microsoft Online Support
| >
| > Get Secure! www.microsoft.com/security
| > (This posting is provided "AS IS", with no warranties, and confers no
| > rights.)
| >
| >
| >
| > --------------------
| > | From: "Leon Finker" <***@nospam.nospam>
| > | References: <#YQz4HH$***@TK2MSFTNGP11.phx.gbl>
| > | Subject: Re: .NET 2.0/csc.exe/SoapHttpClientProtocol hangs for 15-20
| > seconds (compared to .NET 1.1) under Citrix
| > | Date: Thu, 8 Dec 2005 23:20:51 -0500
| > | Lines: 68
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| > | X-RFC2646: Format=Flowed; Response
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| > | Message-ID: <#h7PyfH$***@tk2msftngp13.phx.gbl>
| > | Newsgroups: microsoft.public.dotnet.framework.clr
| > | NNTP-Posting-Host: ool-182d1f3e.dyn.optonline.net 24.45.31.62
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.dotnet.framework.clr:14774
| > | X-Tomcat-NG: microsoft.public.dotnet.framework.clr
| > |
| > | Another thread in csc.exe has the following callstack:
| > |
| > | ntdll.dll!NtWaitForSingleObject+0xc
| > | mswsock.dll+0x39d1
| > | ws2_32.dll!select+0x99
| > | WINHTTP.dll!WinHttpReceiveResponse+0xc613
| > | WINHTTP.dll!WinHttpReceiveResponse+0xc762
| > | WINHTTP.dll!WinHttpReceiveResponse+0x855e
| > | WINHTTP.dll!WinHttpTimeToSystemTime+0x6407
| > | WINHTTP.dll!WinHttpReceiveResponse+0x855e
| > | WINHTTP.dll!WinHttpTimeToSystemTime+0x8169
| > | WINHTTP.dll!WinHttpReceiveResponse+0x855e
| > | WINHTTP.dll!WinHttpTimeToSystemTime+0x6de5
| > | WINHTTP.dll!WinHttpReceiveResponse+0x855e
| > | WINHTTP.dll!WinHttpTimeToSystemTime+0x28b2
| > | WINHTTP.dll!WinHttpReceiveResponse+0x8668
| > | WINHTTP.dll!WinHttpSetOption+0x573
| > | WINHTTP.dll!WinHttpSendRequest+0x1db
| > | cryptnet.dll!I_CryptNetEnumUrlCacheEntry+0x1ebd
| > | csc.exe+0x10053
| > |
| > | The Citrix machine doesn't have connectivity to the outside.
| > |
| > | "Leon Finker" <***@nospam.nospam> wrote in message
| > | news:%23YQz4HH$***@TK2MSFTNGP11.phx.gbl...
| > | > Hi,
| > | >
| > | > I have a problem where creating a webservice proxy class takes from
| > 15-20
| > | > seconds. This happens under Citrix environment. I was able to see
what
| > | > csc.exe is doing. I'm not 100% sure if I caught it at the right
| > moment.
| > | > Let me know if more info is needed. Here is the callstack:
| > | >
| > | > ntdll!NtWaitForSingleObject+0xc
| > | > cryptnet!I_CryptNetIsConnected+0x205
| > | > cryptnet!I_CryptNetIsConnected+0x104
| > | > cryptnet!CryptGetObjectUrl+0x4b9
| > | > cryptnet!I_CryptNetIsConnected+0x187e
| > | > cryptnet!CryptGetObjectUrl+0x319
| > | > cryptnet!CryptGetObjectUrl+0x273
| > | > cryptnet!CryptGetTimeValidObject+0xa0
| > | > cryptnet!CryptGetTimeValidObject+0x4d
| > | > cryptnet!I_CryptNetIsConnected+0xef0
| > | > cryptnet!CertDllVerifyRevocation+0x38c
| > | > *** ERROR: Symbol file could not be found. Defaulted to export
| > symbols
| > | > for C:\WINDOWS\system32\CRYPT32.dll -
| > | > cryptnet!CertDllVerifyRevocation+0x101
| > | > CRYPT32!CertVerifyCertificateChainPolicy+0x14b0
| > | > CRYPT32!CertVerifyRevocation+0xb5
| > | > CRYPT32!I_CryptCreateLruCache+0x34b0
| > | > CRYPT32!I_CryptCreateLruCache+0x5175
| > | > CRYPT32!I_CryptCreateLruCache+0x7006
| > | > CRYPT32!I_CryptCreateLruCache+0x8a2a
| > | > CRYPT32!I_CryptCreateLruCache+0x8a7b
| > | >
| > | > The process that calls csc.exe is in:
| > | > 0012f538 7ffe0304 [HelperMethodFrame_1OBJ: 0012f538]
| > | > System.Threading.Monitor.Enter(System.Object)
| > | > 0012f590 69919900
| > | > System.Web.Services.Protocols.SoapHttpClientProtocol..ctor()
| > | >
| > | > Do I need to disable cert revocation verification in registry (i
don't
| > | > remember how to do it)? Is this a known problem? How can I work
around
| > | > this?
| > | > This appears to be the only problem so far under Citrix. Thanks for
| > any
| > | > help!
| > | >
| > |
| > |
| > |
| >
|
|
|