URL:
https://github.com/SSSD/sssd/pull/5852
Title: #5852: ifp: new interface to validate a certificate
martinpitt commented:
"""
How about something like this:
New infopipe method `FindByValidCertificate()` which accepts the
certificate as input, validates it against configured CAs, and outputs the user path on
success. This is similar to the existing `FindByCertificate()`, but that does not do any
trust validation.
(Not sure how long your release notes are allowed to be)
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5852#issuecomment-963162874