win_acl/Certificates: Acquire private key by preferring ncrypt, not a…

…llowing it
ansible-collections · Sep 8, 2023 · 91f9ac4 · 91f9ac4
1 parent 5bfb3a2
commit 91f9ac4
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/plugins/module_utils/_CertACLHelper.cs b/plugins/module_utils/_CertACLHelper.cs
@@ -112,9 +112,7 @@ private enum CryptAcquireKeyFlags : uint
         [Flags]
         private enum CryptAcquireKeyFlagControl : uint
         {
-            CRYPT_ACQUIRE_ALLOW_NCRYPT_KEY_FLAG = 0x00010000,
             CRYPT_ACQUIRE_PREFER_NCRYPT_KEY_FLAG = 0x00020000,
-            CRYPT_ACQUIRE_ONLY_NCRYPT_KEY_FLAG = 0x00040000,
         }
 
         private enum KeySpec : uint
@@ -155,7 +153,7 @@ public CertAclHelper(X509Certificate2 certificate)
             bool shouldFreeKey;
             if (!CryptAcquireCertificatePrivateKey(
                     certificate.Handle,
-                    (uint)CryptAcquireKeyFlags.CRYPT_ACQUIRE_SILENT_FLAG | (uint)CryptAcquireKeyFlagControl.CRYPT_ACQUIRE_ALLOW_NCRYPT_KEY_FLAG,
+                    (uint)CryptAcquireKeyFlags.CRYPT_ACQUIRE_SILENT_FLAG | (uint)CryptAcquireKeyFlagControl.CRYPT_ACQUIRE_PREFER_NCRYPT_KEY_FLAG,
                     IntPtr.Zero,
                     out handle,
                     out keySpec,