diff --git a/lib/krb5/pkinit.c b/lib/krb5/pkinit.c
index 02396d9d0..49fb1ac66 100644
--- a/lib/krb5/pkinit.c
+++ b/lib/krb5/pkinit.c
@@ -737,6 +737,7 @@ _krb5_pk_verify_sign(krb5_context context,
 
     ret = hx509_cms_verify_signed(id->hx509ctx,
 				  id->verify_ctx,
+				  0,
 				  data,
 				  length,
 				  NULL,