Use an explicit tag for serverDHNonce, as specified in RFC 4556, rather than the implicit tag we historically used. This bug had no practical effect (and creates no interoperability issues) because we never generate a serverDHNonce. https://github.com/krb5/krb5/commit/94cfb9542c15bb54a786fa62c26f357d183cea41 Commit By: ghudson Revision: 25623 Changed Files: U trunk/src/lib/krb5/asn.1/asn1_k_encode.c U trunk/src/tests/asn.1/pkinit_encode.out U trunk/src/tests/asn.1/pkinit_trval.out