In the PKINIT OpenSSL code, ensure that appropriate cerficiate fields have been set before using ku_reject. Patch from nalin at redhat.com. http://src.mit.edu/fisheye/changelog/krb5/?cs=24313 Commit By: ghudson Revision: 24313 Changed Files: U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c