RFR: JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider [v2]

Mat Carter duke at openjdk.java.net
Tue Apr 12 19:01:32 UTC 2022


> On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.
> 
> "Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added  "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location.  These two new strings simply map to the original two strings, i.e. no duplication of code paths etc
> 
> No new tests added, keystore functionality and API remains unchanged, the local machine keystore types would require the tests to run in admin mode
> 
> Tested on windows, passes tier1 and tier2 tests

Mat Carter has refreshed the contents of this pull request, and previous commits have been removed. Incremental views are not available.

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/8210/files
  - new: https://git.openjdk.java.net/jdk/pull/8210/files/91d58f38..4e165f66

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=8210&range=01
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=8210&range=00-01

  Stats: 79 lines in 4 files changed: 0 ins; 66 del; 13 mod
  Patch: https://git.openjdk.java.net/jdk/pull/8210.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/8210/head:pull/8210

PR: https://git.openjdk.java.net/jdk/pull/8210



More information about the security-dev mailing list