When building PKINIT against OpenSSL 1.0 or later, use the CMS APIs for better interoperability. From nalin at redhat.com. http://src.mit.edu/fisheye/changelog/krb5/?cs=24605 Commit By: ghudson Revision: 24605 Changed Files: U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c