RFR 8223063: Support CNG RSA keys

Sean Mullan sean.mullan at oracle.com
Mon May 13 12:10:04 UTC 2019


Looks fine to me. I assume you resolved the mach5 issue below?

--Sean

On 5/9/19 4:47 AM, Weijun Wang wrote:
> Updated webrev at
> 
>     http://cr.openjdk.java.net/~weijun/8223063/webrev.01/
> 
> Mostly test change. One unused export removed.
> 
> Thanks,
> Max
> 
>> On May 1, 2019, at 7:18 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
>>
>> Please take a look at
>>
>>     https://cr.openjdk.java.net/~weijun/8223063/webrev.00/
>>
>> Unfortunately, although the new test I added succeeds on my own machine, the "certutil -importPFX" command inside always fail on Mach5 with
>>
>>    Command line: [certutil -f -v -p changeit -user -importpfx MY ks NoRoot]
>>    A -- A-7626e24d-46df-4ba0-8880-9866bb1-01966
>>    A -- A-7626e24d-46df-4ba0-8880-9866bb178ab6
>>    CertUtil: -importPFX command FAILED: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED)
>>    CertUtil: The requested operation is not supported.
>>
>> Maybe there is a permission issue.
>>
>> I'll study it for more, but If anyone of you can fix it I'll be very happy.
>>
>> Thanks,
>> Max
>>
> 



More information about the security-dev mailing list