[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

[Hristina Marosevic]

So, I am not sure if I should use

userCertificate;binary:: MIIGMT..

in the ldif file.

Also, should I add the -----BEGIN CERTIFICATE-----/-----END CERTIFICATE----- (now I am adding only the content between these lines as a value of the userCertificate;binary attribute) ? and if yes, should they be base64 encoded, too?