473,657 Members | 3,041 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Selecting SSL Certificates

56 New Member
I wrote a SSL client application. It is communicating fine through SSL, but I noticed that the SSL communication takes anywhere from 15-20 seconds, where tcp is only about 3-5 seconds. Steping through my code I notice that when I am selecting the certificate and returning it, the code pauses for about 7-10 seconds after steping out of that function. Here is the function:

Expand|Select|Wrap|Line Numbers
  1.     Private Function SelectLocalCertificate(ByVal sender As Object, ByVal targetHost As String, ByVal localCertificate As X509CertificateCollection, ByVal remotecertficate As X509Certificate, ByVal acceptableIssuers() As String) As X509Certificate
  2.  
  3.         If ((localCertificate Is Nothing) Or (localCertificate.Count = 0)) Then
  4.             Return Nothing
  5.         End If
  6.  
  7.         Return localCertificate(0)
  8.  
  9.     End Function
  10.  
I'm calling this function when instantiating the SSL stream

Expand|Select|Wrap|Line Numbers
  1. socketStream = New SslStream(socket.GetStream, False, New RemoteCertificateValidationCallback(AddressOf ValidateServerCertificate), New LocalCertificateSelectionCallback(AddressOf SelectLocalCertificate))
  2.  
This is using VS2005 and .NET 3.0. Is this normal, or is there something I can do to speed up the process?
Mar 28 '08 #1
0 894

Sign in to post your reply or Sign up for a free account.

Similar topics

1
1474
by: Next | last post by:
Hello, I sure could use someone's help : ) I need to authenticate users and securely upload files from laptops on the internet ( not on the same domain as server ) to a server on my domain. But I don't want any interaction from the user...I don't want them to have to enter a username and password. So I believe part of the solution is to use certificates...Many-to-one...Right?
0
1612
by: cl | last post by:
I am using the "VeriSign Class 3 Code Signing" certificate for signing my Access program in Office 2003. Up to now, when program was installed on client machine, a form was appearing and user was selecting option "Always trust files from this publisher.....". With these steps Certificate was installed and security warnings of Office 2003 were not appearing again. On another machine, these steps didn't succed. When viewing the...
0
1565
by: dinoo | last post by:
Can some body help me out? I am trying to use client certificates in a Webservice. But some how i am not able to make it. I went through the msdn resources but i think some one needs to help me out. I am using IIS 5.1 on Windows XP professional. I am able to setup the SSL on my webserver using the 14 day trial period certificate. I setup the virtual directory using SSL connection required and Required Client certificates. I want to know...
2
1303
by: Larry David | last post by:
Hi, This is one of those posts where not only do I not know the answer, I don't fully understand the *question* that I should be asking... but I'll try my best: I've designed a web site which authenticates users via a login page. The users can then access their account information. The types of reports that the user can run depend upon the user's access level. I'm currently storing all usernames, passwords, and access levels in a SQL...
5
4442
by: | last post by:
Hi all, HttpWebRequest, and SoapHttpClientProtocol both expose a ClientCertificates property, which can hold multiple client certificates, but on the service side, it can only receive one client certificate, since it derives System.Web.Services.WebService class, and it's Context.Request.ClientCertificate is a single HttpClientCertificate object, is there a way to receive all the client certificates that is sent in the request? or does IIS...
1
1847
by: rds | last post by:
We are developing a smart client application which consumes web services. The web services are being secured with X509 certificates. During the development/testing phase we have been using the X509 certificates which ship with the WSE 2 install. I am interested in knowing from where one purchases these Client/Servier certificates for commercial use, and pricing options for the same. Our initial research into CA vendors e.g. Verisign,...
2
5772
by: Rune Nergard | last post by:
I have tried to use the System.Security.Cryptography.Xml.SignedXml class to sign an Xml message with Xml-DSIG and using an Enveloped signature type and the sha1RSA algorithm. Everything works fine with soft certificates and some smartcard based certificates. I'm using X509Certificate2 to hold the certificates. My problem is that our customers is forced (by law!) to use a smart-card based personal certificate with strong protection. That is...
5
1926
by: GaryDean | last post by:
I have to write an asp.net app that uses a web service requiring x.509 certificates. Are there any good docs on how to do this both in code and on the server. Most of the stuff I'm finding through google is old 1.1 docs. I have the certificate. -- Regards, Gary Blakely
0
1096
Frinavale
by: Frinavale | last post by:
I am currently developing a VB.NET application which consumes a Web Service (implemented in Java). I am hosting the Web Service using Apache Tomcat on my development machine (localhost). The web service requires the use of certificates to verify who is calling it. I have created the certificates (one client and one server) using Java's keytool.exe tool. I have installed both certificates into the "TrustedPeople" store and I have place the...
0
8384
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8820
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
8718
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8499
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8601
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
6162
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5630
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4150
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
2
1601
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.