URL:
https://github.com/SSSD/sssd/pull/814
Title: #814: certmap: allow missing KU in OpenSSL version
jhrozek commented:
"""
I'm sorry it took me almost a week to test the new patches. They seem to work fine:
```
[root@client ~]# sssctl cert-show $(base64 -w0 /home/jhrozek/certuser.der)
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
sss cert content (format might change):
Issuer: CN=federation test CA,OU=federation test,O=federation
Subject: CN=certuser,OU=SSSD test,O=SSSD
Key Usage: 176(0x00b0) (digitalSignature,keyEncipherment,dataEncipherment)
Extended Key Usage #0: 1.3.6.1.5.5.7.3.1 (serverAuth)
Extended Key Usage #1: 1.3.6.1.5.5.7.3.2 (clientAuth)
[root@client ~]# sssctl cert-map $(base64 -w0 /home/jhrozek/certuser.der)
ldb: unable to dlopen /usr/lib64/ldb/modules/ldb/memberof.la :
/usr/lib64/ldb/modules/ldb/memberof.la: invalid ELF header
certuser
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/814#issuecomment-496689261