Hello all.
I have signed my applications with a Code Signing Certificate for a long time. Still, since the last renew (SHA256), I noticed every time I start my application a request to the corresponding CRL (certificate
revocation list) is made.
Nothing strange but this leads to a several timeouts before the application is ready because typically it's installed on servers without internet access (I know: I could disable the check, black-hole it in
hosts file, ...)
With another certificate (older, SHA1) the application starts immediately, and no requests is made to CRL
I didn't found any documentation about differences in CRL with different types of certificates...
Someone is so kind as to know some behaviour differences between the two cases?
Thanks.
Enrico
