RFR: 8313367: SunMSCAPI cannot read Local Computer certs w/o Windows elevation [v5]

Weijun Wang weijun at openjdk.org
Thu Apr 11 13:06:46 UTC 2024


On Thu, 11 Apr 2024 07:57:12 GMT, Bernd <duke at openjdk.org> wrote:

>> rebarbora-mckvak has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   8313367: copyright updated
>
> Did you test with CNG keys as well? Using the new providers is much more important since they can enforce the key isolation.

@ecki I've manually run the SunMSCAPI related tests on a machine with UAC turned on and they succeeds. [One of the test](https://github.com/openjdk/jdk/blob/master/test/jdk/sun/security/mscapi/VeryLongAlias.java) is about loading a CNG entry and signing/verifying with it.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16687#issuecomment-2049645313



More information about the security-dev mailing list