Make the pkinit nonce signed (like the kerberos nonce).

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21088 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-13 19:29:49 +00:00
parent 5286ace71e
commit 272ac7eac4
1 changed files with 1 additions and 1 deletions
--- a/lib/asn1/pkinit.asn1
+++ b/lib/asn1/pkinit.asn1
@@ -160,7 +160,7 @@ KDCDHKeyInfo-Win2k ::= SEQUENCE {

 ReplyKeyPack-Win2k ::= SEQUENCE {
        replyKey                [0] EncryptionKey,
-        nonce                   [1] INTEGER (0..4294967295),
+        nonce                   [1] INTEGER (-2147483648..2147483647),
 	...
 }