Skip to content

Allow to open "Windows-ROOT" as special keystore #746

@kaikramer

Description

@kaikramer

On Windows KSE allows to see the certificates of the currently logged-in user (similar to certmgr). This native user certificate store is also known as the "Windows-MY" keystore:

Image

And in KSE's preferences window the Windows certificate store for trusted root certificates ("Windows-ROOT") can be selected as one of the sources for trust checks:

Image

To actually see the root certificates that are stored in Windows-ROOT one has to open a different application. KSE should be able to display the content of the Windows-ROOT keystore on its own.

Documentation of the relevant SunMSCAPI Provider:
https://docs.oracle.com/en/java/javase/17/security/oracle-providers.html#GUID-4F1737D6-1569-4340-B140-678C70E63CD5

There are four Windows keystores defined by the SunMSCAPI provider:
Windows-MY-CURRENTUSER (also known as Windows-MY)
Windows-ROOT-CURRENTUSER (also known as Windows-ROOT)
Windows-MY-LOCALMACHINE
Windows-ROOT-LOCALMACHINE

For this ticket the two "-LOCALMACHINE" variants are being ignored, but if there is demand, we might consider adding them as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions