<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Greetings,<br>
<br>
I'm curious as to how IPA handles smart cards containing multiple
certificates. When I follow the steps listed at
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationStep1">https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationStep1</a>
when installing my certificate, I notice the certutil command dumps
all installed certificates, and dumps the certificates in a
different order depending on which certificate is selected. When
the server tries to match a certificate does it compare all
certificates as one long continuous string, or does it compare one
certificate at a time? I'm curious if this presents a problem for
the end-user or has this problem been addressed?<br>
<div class="moz-signature">-- <br>
<b>Michael Rainey</b><br>
</div>
</body>
</html>