namecoin / certinject

Inject certificates into Windows CryptoAPI trust store, with EKU and name constraints.
https://www.namecoin.org/
GNU General Public License v3.0
2 stars 6 forks source link

Give a more helpful error when registry permissions are insufficient #46

Open JeremyRand opened 3 years ago

JeremyRand commented 3 years ago

If you try to inject a cert into a CryptoAPI store that doesn't have sufficient permissions, you'll get a confusing error "ncdns.certinject: Couldn't open cert store: Access is denied." It would be useful to actually tell the user which registry key is missing the needed permissions, and which permissions are actually needed.