RFR 8223063: Support CNG RSA keys

Weijun Wang weijun.wang at oracle.com
Wed May 1 15:20:58 UTC 2019

It looks the Mach5 machines are Windows Server 2012 but mine is 2019. I removed the "-f" option and everything looks fine now.


> On May 1, 2019, at 7:18 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
> Please take a look at
>    https://cr.openjdk.java.net/~weijun/8223063/webrev.00/
> Unfortunately, although the new test I added succeeds on my own machine, the "certutil -importPFX" command inside always fail on Mach5 with
>   Command line: [certutil -f -v -p changeit -user -importpfx MY ks NoRoot]
>   A -- A-7626e24d-46df-4ba0-8880-9866bb1-01966
>   A -- A-7626e24d-46df-4ba0-8880-9866bb178ab6
>   CertUtil: -importPFX command FAILED: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED)
>   CertUtil: The requested operation is not supported.
> Maybe there is a permission issue.
> I'll study it for more, but If anyone of you can fix it I'll be very happy.
> Thanks,
> Max

More information about the security-dev mailing list