[Mono-bugs] [Bug 79991][Nor] Changed - Machine cert store location not FHS compliant

bugzilla-daemon at bugzilla.ximian.com bugzilla-daemon at bugzilla.ximian.com
Mon Nov 20 10:44:55 EST 2006


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by sebastien at ximian.com.

http://bugzilla.ximian.com/show_bug.cgi?id=79991

--- shadow/79991	2006-11-20 10:09:46.000000000 -0500
+++ shadow/79991.tmp.10213	2006-11-20 10:44:55.000000000 -0500
@@ -63,6 +63,20 @@
 place in an analogous place to the HKLM registry entries -- and those
 use Environment.GetMachineConfigPath(). The current location seems
 simply wrong to me.
 
 Just a statement of how I see it. What you do with it is your call.
 Not reopening.
+
+------- Additional Comments From sebastien at ximian.com  2006-11-20 10:44 -------
+You shouldn't care about the location of the machine roots
+certificates. With the sole exception of the root user running a
+"certificate manager" the machine store are read-only from an
+application point-of-view (i.e. the machine store isn't designed for
+application-specific configuration). Indirect access to the stores
+isn't supported and could be painful (with the upcoming update to the
+new 2.0 store classes). 
+
+Note that Mono process both the current user and local machine (the
+later for compatibility) when building a certificate chain. Unless you
+have very special requirements you should be able to do everything
+with the current user stores.


More information about the mono-bugs mailing list