URL:
https://github.com/SSSD/sssd/pull/674
Author: sumit-bose
Title: #674: p11_child: add OCSP and CRL check ot the OpenSSL version
Action: opened
PR body:
"""
Two methods to check if certificates are revoked are added.
Since the two patches are only about certificate validation they can be tested
by calling p11child with the --verification and --certificate option to just
verify the given certificate. OCSP is used by default if there is the URL of a
responder in the certificate. the CRL check must be enabled by specifying a PEM
CRL file with the new crl_file sub-option.
Related to
https://pagure.io/SSSD/sssd/issue/3489
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/674/head:pr674
git checkout pr674