Question

启动服务时（Docker容器中.Net Core 2.2上的API），我收到警告：

未配置XML加密器。键 {daa53741-8295-4c9b-ae9c-e69b003f16fa}可以持久存储在未加密的表格。

我没有配置DataProtection。我找到了配置DataProtection的解决方案，但不需要保存此密钥。对我来说，如果密钥仅在应用程序重新启动之前一直存在-没关系。但是我不需要在日志中看到此警告

有什么想法吗？我们该怎么办？

我的启动类如下：

public class Startup {
  public Startup(IConfiguration configuration) {
    Configuration = configuration;
  }

  public IConfiguration Configuration { get; }

  public void ConfigureServices(IServiceCollection services) {
    services.AddMemoryCache();
    services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
    services.AddApiVersioning(o => o.ApiVersionReader = new HeaderApiVersionReader("api-version"));
  }

  public void Configure(IApplicationBuilder app, IHostingEnvironment env, IApplicationLifetime lifetime) {
    if (env.IsDevelopment()) {
      app.UseDeveloperExceptionPage();
    }

    app.UseMvc();

    lifetime.ApplicationStarted.Register(OnApplicationStarted);
    lifetime.ApplicationStopping.Register(OnShutdown);
  }

  public void OnApplicationStarted() {
    Console.Out.WriteLine($"Open Api Started");
  }

  public void OnShutdown() {
    Console.Out.WriteLine($"Open Api is shutting down.");
  }
}

也许对我有帮助我的项目包

<ItemGroup>
    <PackageReference Include="BouncyCastle.NetCore" Version="1.8.5" />
    <PackageReference Include="Microsoft.AspNetCore.App" />
    <PackageReference Include="Microsoft.AspNetCore.Mvc.Versioning" Version="3.1.2" />
    <PackageReference Include="Microsoft.AspNetCore.Razor.Design" Version="2.2.0" PrivateAssets="All" />
    <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.5.4" />
    <PackageReference Include="Oracle.ManagedDataAccess.Core" Version="2.18.6" />
</ItemGroup>

Answer 1

可能是权限错误，但您必须确定。引发此错误时尝试记录日志，我发现在开发环境中出现此错误的原因很多，通常是文件读取权限，找不到或没有文件。

用波纹管记录算法包装您的主要功能，看看有什么问题

public static void Main(string[] args)
        {
            CurrentDirectoryHelpers.SetCurrentDirectory();

            Log.Logger = new LoggerConfiguration()
                            .MinimumLevel.Information()
                            .MinimumLevel.Override("Serilog", LogEventLevel.Information)
                            .WriteTo.File("Logs/LogFrom_ProgramMain.txt")
                            .CreateLogger();

            try
            {
                var whb = WebHost.CreateDefaultBuilder(args).UseContentRoot(Directory.GetCurrentDirectory());

               //whb... your codes

                Log.Logger.Information("Information:blabla");

            }
            catch(Exception ex)
            {
                Log.Logger.Error("Main handled an exception: " + ex.Message);
            }
        }

不要轻易相信代码，请参阅

如果需要，可以使用此帮助方法

internal class CurrentDirectoryHelpers
    {
        internal const string AspNetCoreModuleDll = "aspnetcorev2_inprocess.dll";

        [System.Runtime.InteropServices.DllImport("kernel32.dll")]
        private static extern IntPtr GetModuleHandle(string lpModuleName);

        [System.Runtime.InteropServices.DllImport(AspNetCoreModuleDll)]
        private static extern int http_get_application_properties(ref IISConfigurationData iiConfigData);

        [System.Runtime.InteropServices.StructLayout(System.Runtime.InteropServices.LayoutKind.Sequential)]
        private struct IISConfigurationData
        {
            public IntPtr pNativeApplication;
            [System.Runtime.InteropServices.MarshalAs(System.Runtime.InteropServices.UnmanagedType.BStr)]
            public string pwzFullApplicationPath;
            [System.Runtime.InteropServices.MarshalAs(System.Runtime.InteropServices.UnmanagedType.BStr)]
            public string pwzVirtualApplicationPath;
            public bool fWindowsAuthEnabled;
            public bool fBasicAuthEnabled;
            public bool fAnonymousAuthEnable;
        }

        public static void SetCurrentDirectory()
        {
            try
            {
                // Check if physical path was provided by ANCM
                var sitePhysicalPath = Environment.GetEnvironmentVariable("ASPNETCORE_IIS_PHYSICAL_PATH");
                if (string.IsNullOrEmpty(sitePhysicalPath))
                {
                    // Skip if not running ANCM InProcess
                    if (GetModuleHandle(AspNetCoreModuleDll) == IntPtr.Zero)
                    {
                        return;
                    }

                    IISConfigurationData configurationData = default(IISConfigurationData);
                    if (http_get_application_properties(ref configurationData) != 0)
                    {
                        return;
                    }

                    sitePhysicalPath = configurationData.pwzFullApplicationPath;
                }

                Environment.CurrentDirectory = sitePhysicalPath;
            }
            catch
            {
                // ignore
            }
        }
    }

Answer 2

此问题源于IIS本身的一个错误，该错误可能会或永远不会得到纠正。为了解决此问题，您需要编辑应用程序池以启用用户配置文件加载。设置应用程序池以加载应用程序池标识的用户配置文件后，该应用程序将具有按预期方式读写系统注册表的权限。

IIS>高级设置>加载用户配置文件：true

或者，您可以将Data Protection配置为使用其他密钥存储方法，例如UNC share。

Source for more informations

.Net Core警告未配置XML加密器

2 个答案: