JDK-8213010 : Supporting keys created with certmgr.exe
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Priority: P4
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2018-10-26
  • Updated: 2020-06-09
  • Resolved: 2018-12-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 12 JDK 13 JDK 8 Other
11.0.7-oracleFixed 12Fixed 13 teamFixed 8u251Fixed openjdk8u252Fixed
Related Reports
Relates :  
Relates :  
Relates :  
Description
The enhancement request is to add support for certificates being created with MS Certificate Manager-Tool (Certmgr.exe).
Reason: Certificates created with MS certmgr are not being recognized
forr SSL client side encryption. When trying to list the content of a MSCAPI keystore
keytool -list storetype Windows-My
these certs are being listed as trusted certs rather than as PrivateKeyEntry

More info which seems to confirm a suspected incompatibility is here:
http://blogs.msdn.com/b/alejacma/archive/2009/12/22/invalid-provider-type-specified-error-when-accessing-x509certificate2-privatekey.aspx 
Comments
Fix request (11u) I would like to downport this for parity with 11.0.7-oracle. I had to resolve this. While the resolve of security.cpp looks complicated, it just brings the code to a common level. After this change 11 equals 14 at "8221407: Windows 32bit build error in libsunmscapi/security.cpp" wrt. to this file. Review http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-December/002283.html
21-12-2019