In PKINIT, notice if DH_compute_key() returns a value less than the buffer size, and pad it on the left if so. http://src.mit.edu/fisheye/changelog/krb5/?cs=24137 Commit By: ghudson Revision: 24137 Changed Files: U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c