URL:
https://github.com/SSSD/sssd/pull/570
Title: #570: p11_child: add OpenSSL support
jhrozek commented:
"""
My testing worked well with a Yubikey. I hit two issues:
- I couldn't authenticate without EKUs being present in the certificate
- I had to manually specify pam_cert_db_path otherwise validation would fail.
I'll let Sumit decide if he prefers to have these patched pushed as they are to avoid
rebasing or of any of those would be better to fix before pushing.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/570#issuecomment-391687411