URL:
https://github.com/SSSD/sssd/pull/843
Title: #843: p11_child: prefer better digest function if card supports it
alexey-tikhonov commented:
"""
But I still need to setup env to verify patch manually.
Verified manually with local user auth and "Yubico YubiKey OTP+FIDO+CCID 00
00"
Master:
```
[read_certs] (0x4000): found cert[Certificate for PIV
Authentication][/CN=test/O=EXAMPLE.ORG]
...
[sign_data] (0x4000): Found RSA key using CKM_SHA1_RSA_PKCS.
[do_card] (0x4000): Certificate verified and validated.
[do_card] (0x4000): Found certificate has key id [01].
```
With this patch:
```
[read_certs] (0x4000): found cert[Certificate for PIV
Authentication][/CN=test/O=EXAMPLE.ORG]
...
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [544].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [597].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [592].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [608].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [624].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [528].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [576].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [4624].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [4161].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [4177].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [4176].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [3].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [1].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [6].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [70].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [64].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [65].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [66].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [5].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [8].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [13].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [14].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [71].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [67].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [68].
[get_preferred_rsa_mechanism] (0x4000): Found mechanism [69].
[get_preferred_rsa_mechanism] (0x0200): Using PKCS#11 mechanism [66][CKM_SHA512_RSA_PKCS]
and local message digest [sha512].
[sign_data] (0x4000): Found RSA key using mechanism [66].
[do_card] (0x4000): Certificate verified and validated.
[do_card] (0x4000): Found certificate has key id [01].
```
-- and user logged in successfully.
ACK.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/843#issuecomment-513544882