[cvsnt] CVSNT 2.5.04 build 3236 server really slow

Arthur Barrett arthur.barrett at march-hare.com
Fri Nov 14 19:17:54 GMT 2008

Jørgen ,

>    The verification is not a Windows whim as Arthur implies, but an
>    explicit check made by CVS. It happens in the cvsapi (in
>    cvsapi\win32\LibraryAccess.cpp). 

The "VerifyTrust" serves a slightly different purpose and was clearly described in the release notes.  

Regardless - there is no performance penealty doing this at all - it even works when completely disconnected form the internet.  There is clearly something odd about your installation - if it's an interaction between the "VerifyTrust" code and your install and we can improve it in the "VerifyTrust" code then that'd be good to do (eg: by verifying the signature without checking the revoke list), but we are still waiting to find out from you why you cannot connect to Verisign.  Did you try adding the reverse DNS to your hosts file as suggested?


Arthur Barrett

More information about the cvsnt mailing list