Hi all, We found there is some existing kerberos-pkinit implementation in directory sandbox(https://svn.apache.org/repos/asf/directory/sandbox/erodriguez/kerberos-pkinit/), that is great help for us, we will consolidate and merge it to kerby. This work will be in https://issues.apache.org/jira/browse/DIRKRB-415.
Thanks Jiajia
