[CDRIVER-1964] Windows CA stores should be opened with read-only flag Created: 21/Dec/16  Updated: 21/Nov/18  Resolved: 06/Jan/17

Status: Closed
Project: C Driver
Component/s: libmongoc
Affects Version/s: 1.5.1
Fix Version/s: 1.5.2

Type: Bug Priority: Critical - P2
Reporter: Jeremy Mikola Assignee: Hannes Magnusson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

OpenSSL on Windows


Issue Links:
Depends
is depended on by PHPC-881 Windows CA stores should be opened wi... Closed
Related
related to SERVER-27592 Windows Certificate Store must be ope... Closed
related to TOOLS-2158 mongodump failing on Windows with "e... Closed

 Description   

In the absence of a ca_file or ca_dir, libmongoc falls back to loading the system CA store on Windows via _mongoc_openssl_import_cert_stores(). This should incorporate CERT_STORE_READONLY_FLAG in case the current user does not have full access to the store.

bjori already has a patch for this in mongodb/mongo-php-library#313, which also improves error reporting should the CA store still fail to open properly.



 Comments   
Comment by Githook User [ 17/Jan/17 ]

Author:

{u'username': u'jmikola', u'name': u'Jeremy Mikola', u'email': u'jmikola@gmail.com'}

Message: PHPC-881: Bump libmongoc and libbson to 1.5.3

Includes CDRIVER-1964, which fixes an issue with opening the Windows CA store.
Branch: master
https://github.com/mongodb/mongo-php-driver/commit/a1cd5242173fce37a7024ff0d94bfc5c39db0d08

Comment by Githook User [ 06/Jan/17 ]

Author:

{u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}

Message: CDRIVER-1964 Windows CA stores should be opened with read-only flag
Branch: master
https://github.com/mongodb/mongo-c-driver/commit/a6d798466d5ae00158584724cfaf52a5b2c4a55f

Comment by Githook User [ 06/Jan/17 ]

Author:

{u'username': u'bjori', u'name': u'Hannes Magnusson', u'email': u'bjori@php.net'}

Message: CDRIVER-1964 Windows CA stores should be opened with read-only flag
Branch: r1.5
https://github.com/mongodb/mongo-c-driver/commit/bfa06ccc935819d6dd149fb2b5c26f1351893715

Generated at Wed Feb 07 21:13:44 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.