RFR: 8313367: SunMSCAPI cannot read Local Computer certs w/o Windows elevation

Weijun Wang weijun at openjdk.org
Tue Dec 19 18:34:38 UTC 2023


On Thu, 16 Nov 2023 12:06:26 GMT, rebarbora-mckvak <duke at openjdk.org> wrote:

> This fixes the defect described at https://bugs.openjdk.org/browse/JDK-8313367
> 
> If the process does not have write permissions, the store is opened as read-only (instead of failing).
> 
> Please note that permissions to use a certificate in a local machine store must be granted - in a management console, select a certificate, right-click -> All tasks... -> Manage Private Keys... -> add Full control to user.

Also, when a keystore is read-only. What happens when one tries to write into it? Ideally a `KeyStoreException` should be thrown with a clear and precise message.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16687#issuecomment-1863285096



More information about the security-dev mailing list