[PKINIT]Invalid response for AS_REQ with win 2003 sever

[akshar kanak]

Dear team
       I ma trying to perfrom Kerberos PKINIT authnetication with windows
2003 server .the clinet is able to send AS_REQ packet but the server is
responding with KRB5KRB_AP_ERR_MODIFIED .In RFC 4120 i could not find
whether KRB5KRB_AP_ERR_MODIFIED is a proper error response for AS_REQ .
In the MIT 1.6.3 soucre code in file Pkinit_crypto_openssl , in function
cms_signeddata_create()

    /* Some tokens can only do RSAEncryption without sha1 hash */
    /* to compute sha1WithRSAEncryption, encode the algorithm ID for the
hash
     * function and the hash value into an ASN.1 value of type DigestInfo
     * DigestInfo::=SEQUENCE {
     * digestAlgorithm  AlgorithmIdentifier,
     * digest OCTET STRING }
     */

Are there any specific cards for which this fix needs to be appiled ?

Thanks in advance

Thanks and Regards
Akshar