>>>>> "jaltman" == Jeffrey Altman via RT <rt-comment@krbdev.mit.edu> writes:

jaltman> +    if (ktype == -1)
jaltman> +        keyblock->enctype = ktype;

Isn't this backwards if you want -1 to mean the enctype doesn't get
coerced?