[jdk11u-dev] RFR: 6782021: It is not possible to read local computer certificates with the SunMSCAPI provider

Mat Carter duke at openjdk.org
Tue Aug 30 21:16:28 UTC 2022


Backport of e3c178d6d87c9e0e2a75cddc72d802cf9124420e

On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.

"Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location. These two new strings simply map to the original two strings, i.e. no duplication of code paths etc

keystore functionality and API remains unchanged, the local machine keystore types require the manual tests to run in admin mode

Tested on windows, passes tier1 (via GH Actions) and manual tests provided in the patch

-------------

Commit messages:
 - Backport e3c178d6d87c9e0e2a75cddc72d802cf9124420e

Changes: https://git.openjdk.org/jdk11u-dev/pull/1348/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1348&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-6782021
  Stats: 187 lines in 5 files changed: 155 ins; 1 del; 31 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/1348.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev pull/1348/head:pull/1348

PR: https://git.openjdk.org/jdk11u-dev/pull/1348


More information about the jdk-updates-dev mailing list