From 272ac7eac475b55e4cb18fa2ca08b635ae8e8fae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Wed, 13 Jun 2007 19:29:49 +0000
Subject: [PATCH] Make the pkinit nonce signed (like the kerberos nonce).

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21088 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/asn1/pkinit.asn1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/asn1/pkinit.asn1 b/lib/asn1/pkinit.asn1
index e89a7217a..3b9e51935 100644
--- a/lib/asn1/pkinit.asn1
+++ b/lib/asn1/pkinit.asn1
@@ -160,7 +160,7 @@ KDCDHKeyInfo-Win2k ::= SEQUENCE {
 
 ReplyKeyPack-Win2k ::= SEQUENCE {
         replyKey                [0] EncryptionKey,
-        nonce                   [1] INTEGER (0..4294967295),
+        nonce                   [1] INTEGER (-2147483648..2147483647),
 	...
 }