The node you are looking for is at certtool ask-pass.