Fix PKINIT two-component matching rule parsing In pkinit_matching.c:parse_rule_set(), apply the default relation when parsing the second component of a rule, not the third. Otherwise we apply no default relation to two-component matching rules, effectively reducing such rules to their second components. Reported by Sumit Bose. https://github.com/krb5/krb5/commit/67ae7bbe1ea7032d1cb79682be3a14e7e13ec64f Author: Greg Hudson Commit: 67ae7bbe1ea7032d1cb79682be3a14e7e13ec64f Branch: master src/plugins/preauth/pkinit/pkinit_matching.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)