RFR 8223063: Support CNG RSA keys

[Weijun Wang]

> On May 13, 2019, at 8:10 PM, Sean Mullan <sean.mullan at oracle.com> wrote:
> 
> Looks fine to me. I assume you resolved the mach5 issue below?

Yes. The test passes on Mach5 now after removing the '-f' option.

--Max

> 
> --Sean
> 
> On 5/9/19 4:47 AM, Weijun Wang wrote:
>> Updated webrev at
>>    http://cr.openjdk.java.net/~weijun/8223063/webrev.01/
>> Mostly test change. One unused export removed.
>> Thanks,
>> Max
>>> On May 1, 2019, at 7:18 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
>>> 
>>> Please take a look at
>>> 
>>>    https://cr.openjdk.java.net/~weijun/8223063/webrev.00/
>>> 
>>> Unfortunately, although the new test I added succeeds on my own machine, the "certutil -importPFX" command inside always fail on Mach5 with
>>> 
>>>   Command line: [certutil -f -v -p changeit -user -importpfx MY ks NoRoot]
>>>   A -- A-7626e24d-46df-4ba0-8880-9866bb1-01966
>>>   A -- A-7626e24d-46df-4ba0-8880-9866bb178ab6
>>>   CertUtil: -importPFX command FAILED: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED)
>>>   CertUtil: The requested operation is not supported.
>>> 
>>> Maybe there is a permission issue.
>>> 
>>> I'll study it for more, but If anyone of you can fix it I'll be very happy.
>>> 
>>> Thanks,
>>> Max
>>>