消息使用X509證書籤名

Question

我正在使用以下代碼在asp.net Web服務中使用數字證書籤名消息。 簽名工作正常期望signedMessage.ComputeSignature線需要長達30到40秒，因爲這是我面臨超時異常。當我在Windows窗體應用程序下運行時，相同的代碼產生的結果是秒數。任何線索或幫助。

public static string Encrypt(string fullMessage, string certificateName, bool deAttch) 
    { 
     X509Certificate2 signer = GetCertificate(certificateName); 
     byte[] contentBytes = Encoding.ASCII.GetBytes(fullMessage); 
     Oid contentOid = new Oid("1.2.840.113549.1.7.1", "PKCS 7 Data"); 
     SignedCms signedMessage = new SignedCms(new ContentInfo(contentOid, contentBytes), deAttch); 

     signedMessage.ComputeSignature(new CmsSigner(signer)); 

     byte[] signedBytes = signedMessage.Encode(); 
     return Convert.ToBase64String(signedBytes).Trim(); 
     } 

Answer 1

我不確定這是否應該是一個答案（我不知道它會造成什麼影響，但我會發現）。只設置的

CmsSigner cert = new CmsSigner(signer); 

屬性

cert.IncludeOption = X509IncludeOption.EndCertOnly;  

其中先前我創建對象使用的構造，並直接傳遞給方法。現在它工作正常，並沒有花費那麼多時間。

public static string Encrypt(string fullMessage, string certificateName, bool deAttch) 
    { 
     X509Certificate2 signer = GetCertificate(certificateName); 
     byte[] contentBytes = Encoding.ASCII.GetBytes(fullMessage); 
     Oid contentOid = new Oid("1.2.840.113549.1.7.1", "PKCS 7 Data"); 
     SignedCms signedMessage = new SignedCms(new ContentInfo(contentOid, contentBytes), deAttch); 
     CmsSigner cert = new CmsSigner(signer); 
     cert.IncludeOption = X509IncludeOption.EndCertOnly;    
     signedMessage.ComputeSignature(cert); 
     byte[] signedBytes = signedMessage.Encode(); 
     return Convert.ToBase64String(signedBytes).Trim(); 
     } 


     private static X509Certificate2 GetCertificate(string certificateName) 
    { 
     X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine); 
     store.Open(OpenFlags.OpenExistingOnly | OpenFlags.ReadOnly); 
     X509Certificate2 certificate = store.Certificates.Cast<X509Certificate2>().Where(cert => cert.Subject.IndexOf(certificateName) >= 0).FirstOrDefault(); 
     if (certificate == null) 
      throw new Exception("Certificate " + certificateName + " not found."); 

     return certificate; 
    }