Issues

• SDK never sends a TOTP-token posture response to routers

  openziti/ziti-sdk-c#1170 · Filter by author scareything opened on Oct 7, 2026

• bind: failed initial router lookup can leave a listener with no terminators and no retry

  openziti/ziti-sdk-c#1165 · Filter by author mikkelke opened on Oct 4, 2026

• legacy_auth: hot loop when the controller returns an already-expired API session

  bug
  openziti/ziti-sdk-c#1163 · Filter by author dovholuknf opened on Oct 2, 2026

• after the IdP session ends, the SDK declares itself fully authenticated without the secondary token and then spins in a tight loop (thousands of controller requests per minute, indefinitely)

  openziti/ziti-sdk-c#1159 · Filter by author mlconsultingstudio opened on Sep 27, 2026
  1

• ext-jwt secondary auth: the SDK keeps sending the token captured at authentication, so the API session dies when that token expires (refreshed tokens are never sent to the controller)

  openziti/ziti-sdk-c#1158 · Filter by author mlconsultingstudio opened on Sep 27, 2026

• Re-auth is not rate limited when controller name resolution fails and the context never recovers

  openziti/ziti-sdk-c#1157 · Filter by author dmuensterer opened on Sep 24, 2026

• Access to services fails whenever any Posture Check is required ("posture state was nil")

  openziti/ziti-sdk-c#1147 · Filter by author jospgu opened on Sep 9, 2026
  1

• OIDC auth fails for CLI-enrolled identities

  openziti/ziti-sdk-c#1146 · Filter by author jamalhabash opened on Sep 8, 2026

• Fuzz token refresh timers

  enhancement
  Feature

  openziti/ziti-sdk-c#1118 · Filter by author mikegorman-nf opened on Aug 13, 2026

• Verify the Circuit Token and authorize the TLS peer

  e2ee
  Task

  openziti/ziti-sdk-c#1102 · Filter by author andrewpmartinez opened on Jul 26, 2026

• Add the chunk framing layer above TLS

  e2ee
  Task

  openziti/ziti-sdk-c#1103 · Filter by author andrewpmartinez opened on Jul 26, 2026

• Run TLS 1.3 over the mesh byte stream with OpenSSL BIOs for mode 2

  e2ee
  Task

  openziti/ziti-sdk-c#1101 · Filter by author andrewpmartinez opened on Jul 26, 2026

• OIDC auth: handle active flow invalidation

  openziti/ziti-sdk-c#1093 · Filter by author ekoby opened on Jul 20, 2026

• MFA posture check on Dial policy never satisfied: SDK fails with "no auth request in progress" or 404 on /current-identity/mfa

  openziti/ziti-sdk-c#1087 · Filter by author jospgu opened on Jul 14, 2026
  

• zl_write accesses bufs[0] without checking nbufs > 0

  openziti/ziti-sdk-c#1068 · Filter by author QiuYitai opened on Jun 17, 2026

• Missing NULL check on calloc return in bind_service

  openziti/ziti-sdk-c#1067 · Filter by author QiuYitai opened on Jun 17, 2026

• Potential Memory Corruption: Missing return value check for ziti_load_config in proxy.c

  openziti/ziti-sdk-c#1064 · Filter by author QiuYitai opened on Jun 8, 2026

• MFA auth is not possible when service policy includes MFA posture check

  openziti/ziti-sdk-c#1061 · Filter by author scareything opened on Jun 3, 2026
  1

• auth: cert proof-of-possession

  openziti/ziti-sdk-c#1058 · Filter by author ekoby opened on Jun 2, 2026

• implement xgress

  openziti/ziti-sdk-c#1057 · Filter by author ekoby opened on Jun 2, 2026
  

• SDK should treat 503 as a signal to try other controllers, when available

  openziti/ziti-sdk-c#1037 · Filter by author plorenz opened on Apr 22, 2026

• internal OIDC: use /.well-known/openid-configuration to discover URLs for openziti OIDC auth flow

  openziti/ziti-sdk-c#1033 · Filter by author ekoby opened on Apr 15, 2026

• crash in oidc client when controller presents invalid URL

  openziti/ziti-sdk-c#1002 · Filter by author scareything opened on Feb 27, 2026

• Assertion failed: (clt->config), function refresh_time_cb

  openziti/ziti-sdk-c#996 · Filter by author scareything opened on Feb 17, 2026

• multi-underlay channels

  enhancement
  Feature

  openziti/ziti-sdk-c#973 · Filter by author ekoby opened on Dec 19, 2025