diff --git a/ChangeLog b/ChangeLog
index 71c316164..41f409437 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,11 @@
-2006-11-21  Love Hörnquist Åstrand  <lha@it.su.se>
+2006-11-23  Love Hörnquist Åstrand  <lha@it.su.se>
 
+	* lib/krb5/pkinit.c (_krb5_pk_create_sign): stuff down the users
+	certs in the pool to make sure a path is returned, without this
+	proxy certificates wont work.
+	
+2006-11-21  Love Hörnquist Åstrand  <lha@it.su.se>
+	
 	* kdc/config.c: Make all pkinit options prefixed with pkinit_
 
 	* lib/krb5/log.c (krb5_get_warn_dest): return warn_dest from
diff --git a/lib/hx509/ChangeLog b/lib/hx509/ChangeLog
index 9ee46eb57..7919037ea 100644
--- a/lib/hx509/ChangeLog
+++ b/lib/hx509/ChangeLog
@@ -1,5 +1,19 @@
-2006-11-16  Love Hörnquist Åstrand  <lha@it.su.se>
+2006-11-23  Love Hörnquist Åstrand  <lha@it.su.se>
 
+	* cert.c (_hx509_calculate_path): allow to calculate optimistic
+	path when we don't know the trust anchors, just follow the chain
+	upward until we no longer find a parent or we hit the max limit.
+
+	* cms.c (hx509_cms_create_signed_1): provide a best effort path to
+	the trust anchors to be stored in the SignedData packet, if find
+	parents until trust anchor or max length.
+
+	* data: regen
+
+	* data/gen-req.sh: Build pk-init proxy cert.
+	
+2006-11-16  Love Hörnquist Åstrand  <lha@it.su.se>
+	
 	* error.c (hx509_get_error_string): Put ", " between strings in
 	error message.
 	
diff --git a/tests/ChangeLog b/tests/ChangeLog
index 14921c258..2f7539123 100644
--- a/tests/ChangeLog
+++ b/tests/ChangeLog
@@ -1,5 +1,9 @@
-2006-11-19  Love Hörnquist Åstrand  <lha@it.su.se>
+2006-11-23  Love Hörnquist Åstrand  <lha@it.su.se>
 
+	* kdc/check-kdc.in: Test proxy cert.
+	
+2006-11-19  Love Hörnquist Åstrand  <lha@it.su.se>
+	
 	* kdc/krb5.conf.in: revert the enable-pkinit change, and make it
 	consistant with all other other enable- options