URL:
https://github.com/SSSD/sssd/pull/5855
Author: alexey-tikhonov
Title: #5855: CKM_RSA_PKCS support.
Action: opened
PR body:
"""
First patch is mostly cosmetic and I don't insist on its inclusion. But IMO it makes
code a little bit more readable (matter of taste though) and handling of error conditions
more accurate.
The "laziest" way to test 2nd patch is to reorder `prefs` in
`get_preferred_rsa_mechanism()` putting `CKM_RSA_PKCS` first.
In this case existing `pam-srv-tests` will use this mechanism:
```
(2021-10-30 20:48:44:135177): [p11_child[3211403]] [get_preferred_rsa_mechanism] (0x0200):
Using PKCS#11 mechanism [1][CKM_RSA_PKCS] with message digest [-none-].
(2021-10-30 20:48:44:135183): [p11_child[3211403]] [sign_data] (0x4000): Found RSA key
using mechanism [1].
(2021-10-30 20:48:44:136646): [p11_child[3211403]] [do_card] (0x4000): Certificate
verified and validated.
```
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/5855/head:pr5855
git checkout pr5855