SSL证书validation – 是否涉及任何caching？

案子：

• 几天前，我们的集成合作伙伴错过了更改SSL服务器证书的最后期限，证书的有效期至两天前。
• 发生这种情况时，我们的客户端软件开始抛出exception：“根据validation过程，远程证书无效”。 我们的客户端软件是用.NET 4编写的，并在Windows Server 2012上运行。SSL调用是通过WCF堆栈完成的。
• 昨天下午，我们的集成合作伙伴安装了一个新的有效的SSL证书。

现在的问题是，我们仍然在客户端上得到同样的exception：“根据validation过程，远程证书是无效的”。

我的问题：

• SSL证书validation状态是否以某种方式caching在客户端上？ 我们的客户端软件是一个长期运行的过程，很less重新启动。
• 或者这是SSL协议的一些固有的部分？ 我不是SSL或networking方面的专家，但是a）只有在SSL握手过程中，客户端才会检查服务器证书，以及b）在SSL握手中交换的信息可以用于多个networking请求同一台服务器 如果确实如此，那么它是如何定义SSL握手有效的？

更新 ：我们重新启动客户端进程，然后它工作。 对我来说，这表明某个SSL服务器证书validation状态被caching在客户端上，每个进程。 我仍然非常想了解更多关于这个细节的信息：在什么级别的堆栈上发生这种情况？ WCF？ 。净？ Windows API？ 这个caching多久了？ 有什么办法可以调整caching行为吗？ 我可以手动清空caching吗？ 这是logging在某处吗？

• 有没有办法通过局域网caching和分发Visual Studio更新？
• 在C＃中打印后台处理程序API设置标志？
• 哪个.net版本的Windows 10内置
• 高精度的睡眠/等待.net
• 在同一个应用程序中启动两个Windows服务

全堆栈跟踪：

[E0]: The remote certificate is invalid according to the validation procedure. [T0]: System.Security.Authentication.AuthenticationException at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult) at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state) at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result) at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size) at System.Net.ConnectStream.WriteHeaders(Boolean async) [E1]: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. [T1]: System.Net.WebException at System.Net.HttpWebRequest.GetResponse() at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannel Request.WaitForReply(TimeSpan timeout) [E2]: Could not establish trust relationship for the SSL/TLS secure channel with authority '***removed***'. [T2]: System.ServiceModel.Security.SecurityNegotiationException