From b017af6f2c8e4a8aab73b474c99fd5324a7b6e3d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Mon, 25 Jun 2007 14:14:51 +0000
Subject: [PATCH] x

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21292 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 ChangeLog | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index c57f6d879..2fd278ff0 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,10 @@
 2007-06-25  Love Hörnquist Åstrand  <lha@it.su.se>
 
+	* kdc/default_config.c: Add [kdc]pkinit_require_binding option.
+
+	* kdc/pkinit.c (pk_mk_pa_reply_enckey): only allow non-bound reply
+	if its not required.
+
 	* kdc/default_config.c: rename pkinit_princ_in_cert and add
 	pkinit_require_binding