{{{ oval_metadata("SSSD should be configured with the correct ocsp_dgst digest function", rule_title=rule_title) }}} ^/etc/sssd/(sssd|conf\.d/.*)\.conf$ ^[\s]*\[sssd](?:[^\n\[]*\n+)+?[\s]*certificate_verification\s*=\s*ocsp_dgst=(\w+)$ 1