diff options
| author | Benjamin Peterson <benjamin@python.org> | 2016-02-18 06:13:19 (GMT) |
|---|---|---|
| committer | Benjamin Peterson <benjamin@python.org> | 2016-02-18 06:13:19 (GMT) |
| commit | 94912727513ccab03567cfcab01732989c0ababc (patch) | |
| tree | a5401015efd3c715c72312935900e84619d2d29f /Modules/_ssl.c | |
| parent | b1db7580611421309ab0be7c0801f4f89ecec440 (diff) | |
| download | cpython-94912727513ccab03567cfcab01732989c0ababc.zip cpython-94912727513ccab03567cfcab01732989c0ababc.tar.gz cpython-94912727513ccab03567cfcab01732989c0ababc.tar.bz2 | |
open the cert store readonly
Patch from Chi Hsuan Yen.
Diffstat (limited to 'Modules/_ssl.c')
| -rw-r--r-- | Modules/_ssl.c | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/Modules/_ssl.c b/Modules/_ssl.c index d918671..02971a7 100644 --- a/Modules/_ssl.c +++ b/Modules/_ssl.c @@ -3597,7 +3597,9 @@ PySSL_enum_certificates(PyObject *self, PyObject *args, PyObject *kwds) if (result == NULL) { return NULL; } - hStore = CertOpenSystemStore((HCRYPTPROV)NULL, store_name); + hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM_A, 0, (HCRYPTPROV)NULL, + CERT_STORE_READONLY_FLAG | CERT_SYSTEM_STORE_LOCAL_MACHINE, + store_name); if (hStore == NULL) { Py_DECREF(result); return PyErr_SetFromWindowsErr(GetLastError()); @@ -3685,7 +3687,9 @@ PySSL_enum_crls(PyObject *self, PyObject *args, PyObject *kwds) if (result == NULL) { return NULL; } - hStore = CertOpenSystemStore((HCRYPTPROV)NULL, store_name); + hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM_A, 0, (HCRYPTPROV)NULL, + CERT_STORE_READONLY_FLAG | CERT_SYSTEM_STORE_LOCAL_MACHINE, + store_name); if (hStore == NULL) { Py_DECREF(result); return PyErr_SetFromWindowsErr(GetLastError()); |