In the PKINIT OpenSSL code, ensure that appropriate cerficiate fields have been set before using ku_reject. Patch from nalin at redhat.com. http://mv.ezproxy.com.ezproxyberklee.flo.org/fisheye/changelog/krb5/?cs=24313 Commit By: ghudson Revision: 24313 Changed Files: U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c