RFR: JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider [v3]
Weijun Wang
weijun at openjdk.java.net
Tue May 10 21:03:52 UTC 2022
On Tue, 10 May 2022 18:51:07 GMT, Mat Carter <duke at openjdk.java.net> wrote:
>> @macarte You need to finalize your CSR soon if you want to include this change into JDK 19. RDP1 is 2022/06/09, and all enhancements require approval after that.
>>
>> BTW, is it possible to detect whether you have admin privilege inside the test? There is a `NTSystem` class inside Java which can find out user info. Maybe the `getGroupIDs()` method will tell you if you are an admin?
>>
>> We can enhance the test before RC.
>
> @wangweij - I added your test and updated to handle Access Denied errors due to admin rights missing, in this case we ignore the test
>
> The CSR has been finalized and I feel we are ready to close out this PR
@macarte Can you explain more on when an "access denied" error could happen? I create a normal user in my local AD and didn't see that. We might need to talk about this in the release note.
-------------
PR: https://git.openjdk.java.net/jdk/pull/8211
More information about the security-dev
mailing list