URL:
https://github.com/SSSD/sssd/pull/837
Title: #837: p11_child: make OCSP digest configurable
sumit-bose commented:
"""
Hi @dpward ,
thanks for pointing to
https://tools.ietf.org/html/rfc5019#section-2.1.1, so the default
should be switched back to SHA-1. I will check if this works as expected even if the
client is switched into FIPS mode.
@alexey-tikhonov, shall we reopen this ticket or do you prefer a new one?
bye,
Sumit
"""
See the full comment at
https://github.com/SSSD/sssd/pull/837#issuecomment-673889511