When processing DNS names or MS UPNs in pkinit certs, disallow embedded null characters. http://src.mit.edu/fisheye/changelog/krb5/?cs=22516 Commit By: ghudson Revision: 22516 Changed Files: U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c