sssd.git/src/util/cert, branch ad_domain_local_groups

cert_to_ssh_key: properly add leading 0 to bignums

2016-07-07T16:13:32+00:00

In the ssh keys a leading 0 is added to the bignums of the RSA modulus
and exponent if the leading bit is set to avoid the interpretation as a
negative number.

Reviewed-by: Jakub Hrozek

p11: add OCSP default responder options

2016-06-09T09:58:17+00:00

Reviewed-by: Jakub Hrozek

p11: add no_verification option

2016-06-09T09:58:12+00:00

Reviewed-by: Jakub Hrozek

p11: enable ocsp checks

2015-11-26T15:39:49+00:00

This patch enables the Online Certificate Status Protocol in NSS and
adds an option to disable it if needed. To make further tuning of
certificate verification more easy it is not an option on its own but an
option to the new certificate_verification configuration option.

Resolves https://fedorahosted.org/sssd/ticket/2812

Reviewed-by: Jakub Hrozek

ssh: generate public keys from certificate

2015-07-31T07:52:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2711

Reviewed-by: Jakub Hrozek

utils: add NSS version of cert utils

2015-07-31T07:51:35+00:00

Reviewed-by: Jakub Hrozek

certs: add PEM/DER conversion utilities

2015-06-19T16:48:13+00:00

Related to https://fedorahosted.org/sssd/ticket/2596

Reviewed-by: Pavel Březina