RFR: 8313367: SunMSCAPI cannot read Local Computer certs w/o Windows elevation [v2]
rebarbora-mckvak
duke at openjdk.org
Tue Mar 19 15:11:58 UTC 2024
> This fixes the defect described at https://bugs.openjdk.org/browse/JDK-8313367
>
> If the process does not have write permissions, the store is opened as read-only (instead of failing).
>
> Please note that permissions to use a certificate in a local machine store must be granted - in a management console, select a certificate, right-click -> All tasks... -> Manage Private Keys... -> add Full control to user.
rebarbora-mckvak has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:
- Merge branch 'openjdk:master' into sunmscapi-8313367
- 8313367: signHash finds a key in the local machine store
- 8313367: Local Computer store is opened with max. allowed permissions
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/16687/files
- new: https://git.openjdk.org/jdk/pull/16687/files/e1a0a22e..04a47361
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=16687&range=01
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=16687&range=00-01
Stats: 680566 lines in 7619 files changed: 177754 ins; 178354 del; 324458 mod
Patch: https://git.openjdk.org/jdk/pull/16687.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/16687/head:pull/16687
PR: https://git.openjdk.org/jdk/pull/16687
More information about the security-dev
mailing list