[jdk11u-dev] Integrated: 6782021: It is not possible to read local computer certificates with the SunMSCAPI provider

Mat Carter duke at openjdk.org
Tue Sep 6 16:31:07 UTC 2022


On Tue, 30 Aug 2022 21:01:49 GMT, Mat Carter <duke at openjdk.org> wrote:

> Backport of e3c178d6d87c9e0e2a75cddc72d802cf9124420e
> 
> On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.
> 
> "Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location. These two new strings simply map to the original two strings, i.e. no duplication of code paths etc
> 
> keystore functionality and API remains unchanged, the local machine keystore types require the manual tests to run in admin mode
> 
> Tested on windows, passes tier1 (via GH Actions) and manual tests provided in the patch

This pull request has now been integrated.

Changeset: f75b74d1
Author:    Mat Carter <54955201+macarte at users.noreply.github.com>
Committer: Christoph Langer <clanger at openjdk.org>
URL:       https://git.openjdk.org/jdk11u-dev/commit/f75b74d19e84ac802913d3ee8ba033663b0f17ae
Stats:     187 lines in 5 files changed: 155 ins; 1 del; 31 mod

6782021: It is not possible to read local computer certificates with the SunMSCAPI provider

Backport-of: e3c178d6d87c9e0e2a75cddc72d802cf9124420e

-------------

PR: https://git.openjdk.org/jdk11u-dev/pull/1348


More information about the jdk-updates-dev mailing list