我遇到了类似的问题,该问题在此处.这是在Azure App Service中作为Azure WebJob运行的.NET Core 3.1 App.根据上面链接中的讨论,我认为这是目录中文件计数的问题,我很难确定哪个目录已满.Kudu门户上的环境页面显示了这一点,基本上似乎并不是总体磁盘空间问题-
I am running into a similar issue that is described here. This is a .NET Core 3.1 App running as a Azure WebJob in Azure App Service. Based on the discussion in the above link, I assume this is an issue with file counts in a directory, I am having trouble figuring out which directory is getting full. The environments page on the Kudu portal shows this, basically doesn't seem to be a overall disk space issue-
D:\home usage: 57,344 MB total; 56,795 MB free d:\local usage: 11,264 MB total; 10,683 MB free我也确实查看了以上链接中提到的路径,但没有取得很大的成功.在尝试相关问题中建议的代码修复之前,是否有办法弄清楚哪个是违规路径?
I also did look at the paths mentioned in the above link without much success. Is there a way to figure out which is the offending path, before I try the code fix suggested in the related issue?
[08/02/2020 09:20:53 > 4708f0: INFO] Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException: There is not enough space on the disk. [08/02/2020 09:20:53 > 4708f0: INFO] at Internal.Cryptography.Pal.CertificatePal.FilterPFXStore(Byte[] rawData, SafePasswordHandle password, PfxCertStoreFlags pfxCertStoreFlags) [08/02/2020 09:20:53 > 4708f0: INFO] at Internal.Cryptography.Pal.CertificatePal.FromBlobOrFile(Byte[] rawData, String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags) [08/02/2020 09:20:53 > 4708f0: INFO] at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(Byte[] rawData, String password, X509KeyStorageFlags keyStorageFlags) [08/02/2020 09:20:53 > 4708f0: INFO] at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(Byte[] rawData, String password) 推荐答案除非PFX装有 X509KeyStorageFlags.EphemeralKeySet ,否则私钥材料将写入磁盘.特定位置取决于PFX中的信息,但是在所有PFX负载的99.99%中使用的目录记录在 docs.microsoft/zh-cn/windows/win32/seccng/key-storage-and-retrieval#key-directories-and-files .
Unless a PFX is loaded with X509KeyStorageFlags.EphemeralKeySet, the private key material is written to disk. The particular place depends on the information in the PFX, but the directories used in 99.99% of all PFX loads are documented at docs.microsoft/en-us/windows/win32/seccng/key-storage-and-retrieval#key-directories-and-files.
(在0.01%的情况下,PFX内容表示将密钥加载到使用其他位置的其他存储提供程序中.)
(In the 0.01% case, the PFX contents say to load the key into some other storage provider which uses some other location.)
或者,除非您要执行一些需要命名键的操作之一,否则在加载PFX时指定 EphemeralKeySet .
Or, unless you're doing one of the few things that require named keys, specify EphemeralKeySet when loading the PFX.
更多推荐
X509Certificate2构造函数抛出Internal.Cryptography.CryptoThrowHelper + WindowsCryptogra
发布评论