Repository navigation
·
31 commits
to main
since this release
Changed
ccf::crypto::OpenSSL::Unique_BIOno longer accepts temporarystd::vector<uint8_t>orPemarguments, which would leave it dangling (#8628).
Fixed
ccf::crypto::Verifier::remaining_seconds()now returns the whole validity period before that period starts, andremaining_percentage()always returns a fraction between 0.0 and 1.0, including for a certificate whose validity period ends before it starts (#8626).- Service certificate renewal, recovery and previous-identity endorsements now preserve multi-RDN
service_subject_namevalues such asCN=CCF Service,O=CCF User(#8627). - Nodes can now generate and load snapshots of services whose public or private state exceeds 2 GiB, including the snapshot taken when a recovered service opens.
ccf::crypto::KeyAesGcmencryption and decryption now accept AAD and data larger than 2 GiB (#8644).