Upgrades 3.7.7 and 2.8.18 of SNMP4J have been released 2023-03-13T23:00:00Z to fix TSLTM bugs regarding processing of TLS close PDUs triggered by an agent at the end of the TLS handshake (i.e., due to certificate validation issues).
CHANGES
[2023-03-14] Version 3.7.7:
- Fixed: Possible busy looping on
TLSTM
write key when command responder does not accept sender’s certificate but sender has finished handshaking already. Sender is not able to send payload wrapped intooutNetBuffer
to network whenSSLEngine
generated a CLOSE PDU without consuming bytes from theoutAppBuffer
.
[2023-03-14] Version 2.8.18:
- Fixed: Possible busy looping on
TLSTM
write key when command responder does not accept sender’s certificate but sender has finished handshaking already. Sender is not able to send payload wrapped intooutNetBuffer
to network whenSSLEngine
generated a CLOSE PDU without consuming bytes from theoutAppBuffer
.