Re: [EXTERNAL] Re: Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error

2015-08-24 Thread Greg Hudson
On 08/24/2015 12:59 PM, Glenn Machin wrote (off list): > Here is the raw packet. Let me know if there is anything else I can do. I am unfortunately not able to duplicate the error in my setup using either krb5 1.10.x or the master branch, sending this exact packet to the KDC. If I temporarily

Re: [EXTERNAL] Re: Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error

2015-08-24 Thread Glenn Machin
Greg you asking me what version my openssl was triggered a 4 year old memory. Looks like it is an openssl issue, apparently fixed in version 1.0.1f . Seems I asked a similar question then and found this on the krb5-bugs list - http://mailman.mit.edu/pipermail/krb5-bugs/2011-January/008510.ht