[krbdev.mit.edu #6851] pkinit can't parse some valid cms messages

[nalin@redhat.com via RT]

On Tue, Jan 25, 2011 at 01:27:10PM -0500, Greg Hudson via RT wrote:
> Also, we're concerned about the volume of preprocessor directives this  
> patch inserts into the middle of functions.  Would it be possible to 
> define the CMS symbols in terms of the PKCS7 symbols for OpenSSL pre-1.0?

My concern with doing that is about being able to debug the result in
the future, but yes, it can be done that way.  Attached (RT stripped
this paragraph out the first time around), also changing the threshold
version back to 1.0.0.

Cheers,

Nalin