krb5_c_encrypt sets the kvno of ciphertext to 0.
So fill it in after the call to encrypt_tkt_part.

https://github.com/krb5/krb5/commit/3d560dd8addeff2f8d872444038b6ccc87fe7b29
Commit By: hartmans
Revision: 21815
Changed Files:
U   trunk/src/kdc/do_tgs_req.c