Description of problem:
The current Longhorn beta (3 as of this writing) claims to support both draft 9
and rfc4556-style pkinit. The current pkinit-nss client isn't acceptable to the
server using either style of authentication. Sort it out.
This should not be targeted for any RHEL update which might be issued before the
server in question is officially released. I'm filing it now so that we know
it's going to require some work + testing.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.