summaryrefslogtreecommitdiffstats
path: root/Modules
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2016-02-18 06:13:19 (GMT)
committerBenjamin Peterson <benjamin@python.org>2016-02-18 06:13:19 (GMT)
commit94912727513ccab03567cfcab01732989c0ababc (patch)
treea5401015efd3c715c72312935900e84619d2d29f /Modules
parentb1db7580611421309ab0be7c0801f4f89ecec440 (diff)
downloadcpython-94912727513ccab03567cfcab01732989c0ababc.zip
cpython-94912727513ccab03567cfcab01732989c0ababc.tar.gz
cpython-94912727513ccab03567cfcab01732989c0ababc.tar.bz2
open the cert store readonly
Patch from Chi Hsuan Yen.
Diffstat (limited to 'Modules')
-rw-r--r--Modules/_ssl.c8
1 files changed, 6 insertions, 2 deletions
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index d918671..02971a7 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -3597,7 +3597,9 @@ PySSL_enum_certificates(PyObject *self, PyObject *args, PyObject *kwds)
if (result == NULL) {
return NULL;
}
- hStore = CertOpenSystemStore((HCRYPTPROV)NULL, store_name);
+ hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM_A, 0, (HCRYPTPROV)NULL,
+ CERT_STORE_READONLY_FLAG | CERT_SYSTEM_STORE_LOCAL_MACHINE,
+ store_name);
if (hStore == NULL) {
Py_DECREF(result);
return PyErr_SetFromWindowsErr(GetLastError());
@@ -3685,7 +3687,9 @@ PySSL_enum_crls(PyObject *self, PyObject *args, PyObject *kwds)
if (result == NULL) {
return NULL;
}
- hStore = CertOpenSystemStore((HCRYPTPROV)NULL, store_name);
+ hStore = CertOpenStore(CERT_STORE_PROV_SYSTEM_A, 0, (HCRYPTPROV)NULL,
+ CERT_STORE_READONLY_FLAG | CERT_SYSTEM_STORE_LOCAL_MACHINE,
+ store_name);
if (hStore == NULL) {
Py_DECREF(result);
return PyErr_SetFromWindowsErr(GetLastError());