RFR: JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider [v2]
Mat Carter
duke at openjdk.java.net
Tue May 3 22:52:49 UTC 2022
> On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.
>
> "Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location. These two new strings simply map to the original two strings, i.e. no duplication of code paths etc
>
> No new tests added, keystore functionality and API remains unchanged, the local machine keystore types would require the tests to run in admin mode
>
> Tested on windows, passes tier1 and tier2 tests
Mat Carter has updated the pull request incrementally with one additional commit since the last revision:
replace string parameter with int and supporting constants
-------------
Changes:
- all: https://git.openjdk.java.net/jdk/pull/8211/files
- new: https://git.openjdk.java.net/jdk/pull/8211/files/86b5ced5..881bc600
Webrevs:
- full: https://webrevs.openjdk.java.net/?repo=jdk&pr=8211&range=01
- incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=8211&range=00-01
Stats: 45 lines in 2 files changed: 21 ins; 7 del; 17 mod
Patch: https://git.openjdk.java.net/jdk/pull/8211.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/8211/head:pull/8211
PR: https://git.openjdk.java.net/jdk/pull/8211
More information about the security-dev
mailing list