Re: pkinit with smartcard

[Love Hörnquist Åstrand <lha@kth.se>]

Please try the attached patch. The pkcs11 code ever set a default sig  
alg
(it really needs to be sig alg_s, but that will have to change  
later), that made
the supportedCMStypes code explode.

Love

Index: crypto.c
===================================================================
RCS file: /afs/pdc.kth.se/src/packages/kth-krb/SourceRepository/lib/hx509/crypto.c,v
retrieving revision 1.60
retrieving revision 1.61
diff -u -p -u -w -r1.60 -r1.61
--- lib/hx509/crypto.c	6 Dec 2006 10:23:14 -0000	1.60
+++ lib/hx509/crypto.c	9 Dec 2006 12:56:34 -0000	1.61
@@ -1264,6 +1264,7 @@ _hx509_private_key_assign_rsa(hx509_priv
     if (key->private_key.rsa)
 	RSA_free(key->private_key.rsa);
     key->private_key.rsa = ptr;
+    key->signature_alg = oid_id_pkcs1_sha1WithRSAEncryption();
     key->md = &pkcs1_rsa_sha1_alg;
 }