<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div>
<div>
<div>
<div style="direction: ltr;">Max, would it make sense to specify ` -csp "Microsoft Software Key Storage Provider"` to make sure it stores the key in a CNG KSP? (I am not sure what the default provider is). Also maybe make the key non-exportable to make sure
key-handles are actually used for the operations?</div>
<div><br>
</div>
<div style="direction: ltr;">Gruss</div>
<div style="direction: ltr;">Bernd</div>
</div>
<div><br>
</div>
<div class="ms-outlook-ios-signature">
<div><br>
</div>
<div style="direction: ltr;">-- </div>
<div style="direction: ltr;">http://bernd.eckenfels.net</div>
</div>
</div>
<div> </div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="dir="ltr""><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> security-dev <security-dev-bounces@openjdk.java.net> im Auftrag von Weijun Wang <weijun.wang@oracle.com><br>
<b>Gesendet:</b> Mittwoch, Mai 1, 2019 7:21 PM<br>
<b>An:</b> security-dev@openjdk.java.net<br>
<b>Betreff:</b> Re: RFR 8223063: Support CNG RSA keys
<div> </div>
</font></div>
It looks the Mach5 machines are Windows Server 2012 but mine is 2019. I removed the "-f" option and everything looks fine now.
<br>
<br>
--Max <br>
<br>
> On May 1, 2019, at 7:18 AM, Weijun Wang <weijun.wang@oracle.com> wrote: <br>
> <br>
> Please take a look at <br>
> <br>
> https://cr.openjdk.java.net/~weijun/8223063/webrev.00/ <br>
> <br>
> Unfortunately, although the new test I added succeeds on my own machine, the "certutil -importPFX" command inside always fail on Mach5 with
<br>
> <br>
> Command line: [certutil -f -v -p changeit -user -importpfx MY ks NoRoot] <br>
> A -- A-7626e24d-46df-4ba0-8880-9866bb1-01966 <br>
> A -- A-7626e24d-46df-4ba0-8880-9866bb178ab6 <br>
> CertUtil: -importPFX command FAILED: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED)
<br>
> CertUtil: The requested operation is not supported. <br>
> <br>
> Maybe there is a permission issue. <br>
> <br>
> I'll study it for more, but If anyone of you can fix it I'll be very happy. <br>
> <br>
> Thanks, <br>
> Max <br>
> <br>
<br>
</div>
</body>
</html>