RFR: JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider [v3]

Weijun Wang weijun at openjdk.java.net
Tue May 10 21:03:52 UTC 2022


On Tue, 10 May 2022 18:51:07 GMT, Mat Carter <duke at openjdk.java.net> wrote:

>> @macarte You need to finalize your CSR soon if you want to include this change into JDK 19. RDP1 is 2022/06/09, and all enhancements require approval after that.
>> 
>> BTW, is it possible to detect whether you have admin privilege inside the test? There is a `NTSystem` class inside Java which can find out user info. Maybe the `getGroupIDs()` method will tell you if you are an admin?
>> 
>> We can enhance the test before RC.
>
> @wangweij - I added your test and updated to handle Access Denied errors due to admin rights missing, in this case we ignore the test
> 
> The CSR has been finalized and I feel we are ready to close out this PR

@macarte Can you explain more on when an "access denied" error could happen? I create a normal user in my local AD and didn't see that. We might need to talk about this in the release note.

-------------

PR: https://git.openjdk.java.net/jdk/pull/8211



More information about the security-dev mailing list