URL:
https://github.com/SSSD/sssd/pull/843
Author: sumit-bose
Title: #843: p11_child: prefer better digest function if card supports it
Action: opened
PR body:
"""
To improve FIPS compliance and security in general p11_child now checks
which message digest functions (hashes) are support for RSA keys and
tries to use the highest bit length supported.
For EC keys sha512 is used unconditionally.
Related to
https://pagure.io/SSSD/sssd/issue/4039
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/843/head:pr843
git checkout pr843