RFR: 8313367: SunMSCAPI cannot read Local Computer certs w/o Windows elevation [v2]

rebarbora-mckvak duke at openjdk.org
Tue Mar 19 15:11:58 UTC 2024


> This fixes the defect described at https://bugs.openjdk.org/browse/JDK-8313367
> 
> If the process does not have write permissions, the store is opened as read-only (instead of failing).
> 
> Please note that permissions to use a certificate in a local machine store must be granted - in a management console, select a certificate, right-click -> All tasks... -> Manage Private Keys... -> add Full control to user.

rebarbora-mckvak has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:

 - Merge branch 'openjdk:master' into sunmscapi-8313367
 - 8313367: signHash finds a key in the local machine store
 - 8313367: Local Computer store is opened with max. allowed permissions

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/16687/files
  - new: https://git.openjdk.org/jdk/pull/16687/files/e1a0a22e..04a47361

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=16687&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=16687&range=00-01

  Stats: 680566 lines in 7619 files changed: 177754 ins; 178354 del; 324458 mod
  Patch: https://git.openjdk.org/jdk/pull/16687.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/16687/head:pull/16687

PR: https://git.openjdk.org/jdk/pull/16687



More information about the security-dev mailing list