Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8313367 SunMSCAPI cannot read Local Computer certs w/o Windows elevation
  3. JDK-8340661

Release Note: SunMSCAPI Provider Opens the Windows Local Computer Key Store in Read-Only Mode in Non-Elevated Processes

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Delivered
    • Icon: P4 P4
    • 24
    • 24
    • security-libs

      The Local Computer key store is accessed using the `CERT_STORE_MAXIMUM_ALLOWED_FLAG`. Since this store is typically managed by administrators for security reasons, processes are only given read-only access to specific private keys. By opening the store in read-only mode, non-elevated processes can now securely use these keys without requiring elevated permissions.

            weijun Weijun Wang
            weijun Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: