URL:
https://github.com/SSSD/sssd/pull/5280
Title: #5280: p11_child: switch default ocsp_dgst to sha1
sumit-bose commented:
"""
Hi,
thank you for the patch, it is still working fine in FIPS mode.
I think it would be good if you can add an explanation to the man page that `sha1` is used
as default to be compliant with RFC5019.
bye,
Sumit
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5280#issuecomment-676597614