pull up r25486 from trunk

pull up r25486 from trunk

 ------------------------------------------------------------------------
 r25486 | hartmans | 2011-11-22 20:00:27 -0500 (Tue, 22 Nov 2011) | 14 lines

     ticket: new
     subject: FAST PKINIT
     target_version: 1.10
     tags: pullup

     Per RFC 6113 fast should use the inner request body for the pkinit
     checksum. We did that on the KDC; now do so on the client.  Remove
     code that explicitly blocked pkinit under FAST.

     Also, use the reply key *before* the strengthen key is applied when
     verifying the PADATA_PKINIT_KX.

     Add FAST pkinit test.

ticket: 7027
version_fixed: 1.10
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-10@25516 dc483132-0cff-0310-8789-dd5450dbe970