[jdk11u-dev] RFR: 6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
Mat Carter
duke at openjdk.org
Tue Aug 30 21:16:28 UTC 2022
Backport of e3c178d6d87c9e0e2a75cddc72d802cf9124420e
On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.
"Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location. These two new strings simply map to the original two strings, i.e. no duplication of code paths etc
keystore functionality and API remains unchanged, the local machine keystore types require the manual tests to run in admin mode
Tested on windows, passes tier1 (via GH Actions) and manual tests provided in the patch
-------------
Commit messages:
- Backport e3c178d6d87c9e0e2a75cddc72d802cf9124420e
Changes: https://git.openjdk.org/jdk11u-dev/pull/1348/files
Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=1348&range=00
Issue: https://bugs.openjdk.org/browse/JDK-6782021
Stats: 187 lines in 5 files changed: 155 ins; 1 del; 31 mod
Patch: https://git.openjdk.org/jdk11u-dev/pull/1348.diff
Fetch: git fetch https://git.openjdk.org/jdk11u-dev pull/1348/head:pull/1348
PR: https://git.openjdk.org/jdk11u-dev/pull/1348
More information about the jdk-updates-dev
mailing list