[Freeipa-users] ipa user-add-cert and org.freedesktop.sssd.infopipe.Users.FindByCertificate into ps12 and mozilla certificate manager

[Jelle de Jong]

Hello everybody,

I am looking for a way to digitally sign documents by end-users within 
an organisation.

I can add a certificate to every user with our IPA user-add-cert system.

I can use SSSD clients to pull up te certificate.

org.freedesktop.sssd.infopipe.Users.FindByCertificate

Is there a way to integrate SSSD user certificates into the Mozilla 
Certificate Manager?

https://www.freeipa.org/page/V4/User_Certificates

https://help.libreoffice.org/6.1/he/text/shared/guide/digitalsign_send.html

Has anybody otherwise done this with CAcert? or intergrate CAcert 
certificates into ipa user-add-cert?

Kind regards,

Jelle de Jong