salt lengths.
This vulnerability has been registered as CVE-2021-41990.
-- Fixed a denial-of-service vulnerabililty in the in-memory certificate cache
+- Fixed a denial-of-service vulnerability in the in-memory certificate cache
if certificates are replaced and a very large random value caused an integer
overflow.
This vulnerability has been registered as CVE-2021-41991.
PT-TLS (RFC 6876), a Posture Transport Protocol over TLS.
- The charon systime-fix plugin can disable certificate lifetime checks on
- embedded systems if the system time is obviously out of sync after bootup.
+ embedded systems if the system time is obviously out of sync after boot-up.
Certificates lifetimes get checked once the system time gets sane, closing
or reauthenticating connections using expired certificates.
* The data returned is the concatenation of the IKE header and plaintext
* payloads (if any) up until the end of the header of the Encrypted
* Payload followed by the plaintext data of the Encrypted Payload (if any).
- * Lenght fields are adjusted to only contain that of returned data (e.g.
+ * Length fields are adjusted to only contain that of returned data (e.g.
* IV or padding is ignored).
*
* @param[out] plain plaintext encoding (allocated)
* Read up to four bytes in little-endian order from the given buffer.
*
* @param buf byte buffer to read from
- * @param len length betweeen 0 and 4
+ * @param len length between 0 and 4
* @return read value
*/
uint32_t ml_read_bytes_le(uint8_t *buf, size_t len);
* Write up to four bytes of the given value in little-endian order to a buffer.
*
* @param buf byte buffer to write to
- * @param len length betweeen 0 and 4
+ * @param len length between 0 and 4
* @param val value to write
*/
void ml_write_bytes_le(uint8_t *buf, size_t len, uint32_t val);
charon-systemd {
load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici
- # disable DoS protection as the initator will create a lot of IKE_SAs in this scenario
+ # disable DoS protection as the initiator will create a lot of IKE_SAs in this scenario
dos_protection = no
}