[Mono-bugs] [Bug 79991][Nor] Changed - Machine cert store location not FHS compliant

bugzilla-daemon at bugzilla.ximian.com bugzilla-daemon at bugzilla.ximian.com
Mon Nov 20 10:44:55 EST 2006

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by sebastien at ximian.com.


--- shadow/79991	2006-11-20 10:09:46.000000000 -0500
+++ shadow/79991.tmp.10213	2006-11-20 10:44:55.000000000 -0500
@@ -63,6 +63,20 @@
 place in an analogous place to the HKLM registry entries -- and those
 use Environment.GetMachineConfigPath(). The current location seems
 simply wrong to me.
 Just a statement of how I see it. What you do with it is your call.
 Not reopening.
+------- Additional Comments From sebastien at ximian.com  2006-11-20 10:44 -------
+You shouldn't care about the location of the machine roots
+certificates. With the sole exception of the root user running a
+"certificate manager" the machine store are read-only from an
+application point-of-view (i.e. the machine store isn't designed for
+application-specific configuration). Indirect access to the stores
+isn't supported and could be painful (with the upcoming update to the
+new 2.0 store classes). 
+Note that Mono process both the current user and local machine (the
+later for compatibility) when building a certificate chain. Unless you
+have very special requirements you should be able to do everything
+with the current user stores.

More information about the mono-bugs mailing list