diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba0fd90273..6872b93ef9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   build-check-demos:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Clone This Repo
         uses: actions/checkout@v2
@@ -17,11 +17,9 @@ jobs:
           submodules: recursive
       - name: Configure CMake build
         run: |
-          sudo apt-get install -y libmosquitto-dev
-          curl https://cmake.org/files/v3.2/cmake-3.2.0-Linux-x86_64.tar.gz -o cmake.tar.gz
-          tar -xf cmake.tar.gz
+          sudo apt-get install -y libmosquitto-dev cmake
           mkdir build && cd build
-          ../cmake-3.2.0-Linux-x86_64/bin/cmake .. \
+          cmake .. \
           -G "Unix Makefiles" \
           -DBUILD_DEMOS=1 \
           -DCMAKE_BUILD_TYPE=Release \
@@ -46,7 +44,7 @@ jobs:
           make -C build/ help | grep demo | tr -d '. ' | xargs make -C build/
           make -C demos/jobs/jobs_demo_mosquitto
   build-check-demos-cpp:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Clone This Repo
         uses: actions/checkout@v2
@@ -63,11 +61,9 @@ jobs:
           done
       - name: Configure CMake build
         run: |
-          sudo apt-get install -y libmosquitto-dev
-          curl https://cmake.org/files/v3.2/cmake-3.2.0-Linux-x86_64.tar.gz -o cmake.tar.gz
-          tar -xf cmake.tar.gz
+          sudo apt-get install -y libmosquitto-dev cmake
           mkdir build && cd build
-          ../cmake-3.2.0-Linux-x86_64/bin/cmake .. \
+          cmake .. \
           -G "Unix Makefiles" \
           -DBUILD_DEMOS=1 \
           -DCMAKE_BUILD_TYPE=Release \
@@ -91,7 +87,7 @@ jobs:
         run: |
           make -C build/ help | grep demo | tr -d '. ' | xargs make -C build/
   build-check-install:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Clone This Repo
         uses: actions/checkout@v2
@@ -99,10 +95,9 @@ jobs:
           submodules: recursive
       - name: Configure CMake for installation of shared libraries at custom location
         run: |
-          curl https://cmake.org/files/v3.2/cmake-3.2.0-Linux-x86_64.tar.gz -o cmake.tar.gz
-          tar -xf cmake.tar.gz
+          sudo apt-get install -y cmake
           mkdir build && cd build
-          ../cmake-3.2.0-Linux-x86_64/bin/cmake .. \
+          cmake .. \
           -DBUILD_DEMOS=0 \
           -DCSDK_HEADER_INSTALL_PATH="$PWD/../shared-libs-headers-install-dir" -DCSDK_LIB_INSTALL_PATH="$PWD/../shared-libs-install-dir"
       - name: Install shared libraries and verify custom install location
@@ -121,7 +116,7 @@ jobs:
       - name: Configure CMake for installation of static libraries at custom location
         run: |
           cd build
-          ../cmake-3.2.0-Linux-x86_64/bin/cmake .. \
+          cmake .. \
           -DBUILD_SHARED_LIBRARIES=OFF \
           -DBUILD_DEMOS=0 \
           -DCSDK_HEADER_INSTALL_PATH="$PWD/../static-libs-headers-install-dir" -DCSDK_LIB_INSTALL_PATH="$PWD/../static-libs-install-dir"
@@ -141,7 +136,7 @@ jobs:
       - name: Configure CMake build for system install location and selective installation
         run: |
           cd build
-          ../cmake-3.2.0-Linux-x86_64/bin/cmake .. \
+          cmake .. \
           -DBUILD_DEMOS=0 -DBUILD_TESTS=0 -DINSTALL_TO_SYSTEM=1 \
           -DINSTALL_LIBS="SHADOW;DEFENDER" -DINSTALL_PLATFORM_ABSTRACTIONS=0
       - name: Install selected libraries and verify default system installation path is used
@@ -165,7 +160,7 @@ jobs:
           # Each line of install_manifest.txt contains the location of an installed library or header
           done <install_manifest.txt
   complexity:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - name: Setup
@@ -175,7 +170,7 @@ jobs:
           find platform/ \( -iname '*.c' ! -wholename '*test*' \) |\
           xargs complexity --scores --threshold=0 --horrid-threshold=8
   spell-check:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - name: Install spell
@@ -194,7 +189,7 @@ jobs:
             fi
           done
   formatting:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
       - name: Check formatting
@@ -231,7 +226,7 @@ jobs:
           path: ./doxygen.zip
           retention-days: 2
   git-secrets:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
         with:
@@ -249,7 +244,7 @@ jobs:
           git-secrets --register-aws
           git-secrets --scan
   link-verifier:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
         with:
@@ -257,7 +252,7 @@ jobs:
       - name: Setup Python for link verifier action
         uses: actions/setup-python@v2
         with:
-          python-version: '3.7.10'
+          python-version: '3.8'
       - name: Check Links
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -268,7 +263,7 @@ jobs:
           include-file-types: .c,.h,.dox
           allowlist-file: ./.github/links_allowlist.txt
   verify-manifest:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
         with:
diff --git a/.github/workflows/localhost_demo_runner.yml b/.github/workflows/localhost_demo_runner.yml
index 26df0c6e55..2362ee24b0 100644
--- a/.github/workflows/localhost_demo_runner.yml
+++ b/.github/workflows/localhost_demo_runner.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   build-and-run-localhost-demos:
     name: Build and Run Localhost Server Demos
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Clone This Repo
         uses: actions/checkout@v2
@@ -28,9 +28,7 @@ jobs:
 
       - name: Install CMake
         id: install-cmake
-        uses: lukka/get-cmake@v3.26.0
-        with:
-          cmakeVersion: 3.2.0
+        run: sudo apt-get install -y cmake
 
       - name: Generate SSL credentials
         id: generate-credentials
@@ -180,28 +178,28 @@ jobs:
         if: success() || failure() && steps.build-mqtt-serializer-demo.outcome == 'success'
         run: ./build/bin/mqtt_demo_serializer
 
-      - name: Run and monitor the MQTT Serializer Demo
-        if: success() || failure() && steps.build-mqtt-serializer-demo.outcome == 'success'
-        uses: FreeRTOS/CI-CD-GitHub-Actions/executable-monitor@main
-        with:
-          exe-path: ./build/bin/mqtt_demo_serializer
-          log-dir: demo_run_logs
-          timeout-seconds: 300
-          success-line: "Demo completed successfully."
+      # - name: Run and monitor the MQTT Serializer Demo
+      #   if: success() || failure() && steps.build-mqtt-serializer-demo.outcome == 'success'
+      #   uses: FreeRTOS/CI-CD-GitHub-Actions/executable-monitor@main
+      #   with:
+      #     exe-path: ./build/bin/mqtt_demo_serializer
+      #     log-dir: demo_run_logs
+      #     timeout-seconds: 300
+      #     success-line: "Demo completed successfully."
 
       - name: Build the MQTT Subscription Manager Demo
         id: build-mqtt-subscription-manager-demo
         if: success() || failure() && steps.configure-cmake-build.outcome == 'success'
         run: cd build && make mqtt_demo_subscription_manager
 
-      - name: Run and monitor the MQTT Subscription Manager Demo
-        if: success() || failure() && steps.build-mqtt-subscription-manager-demo.outcome == 'success'
-        uses: FreeRTOS/CI-CD-GitHub-Actions/executable-monitor@main
-        with:
-          exe-path: ./build/bin/mqtt_demo_subscription_manager
-          log-dir: demo_run_logs
-          timeout-seconds: 300
-          success-line: "Demo completed successfully."
+      # - name: Run and monitor the MQTT Subscription Manager Demo
+      #   if: success() || failure() && steps.build-mqtt-subscription-manager-demo.outcome == 'success'
+      #   uses: FreeRTOS/CI-CD-GitHub-Actions/executable-monitor@main
+      #   with:
+      #     exe-path: ./build/bin/mqtt_demo_subscription_manager
+      #     log-dir: demo_run_logs
+      #     timeout-seconds: 300
+      #     success-line: "Demo completed successfully."
 
       - name: 'Upload demo logs'
         if: always()
diff --git a/.github/workflows/release-automation.yml b/.github/workflows/release-automation.yml
index 7cb123913f..f2cf13d98e 100644
--- a/.github/workflows/release-automation.yml
+++ b/.github/workflows/release-automation.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   tag-commit:
     name: Tag commit
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -40,7 +40,7 @@ jobs:
   create-zip:
     needs: tag-commit
     name: Create ZIP and verify package for release asset.
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Install ZIP tools
         run: sudo apt-get install zip unzip
@@ -132,7 +132,7 @@ jobs:
   deploy-docs:
     needs: tag-commit
     name: Deploy doxygen docs
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Deploy doxygen for release tag
         uses: FreeRTOS/CI-CD-Github-Actions/doxygen-generation@main
@@ -163,7 +163,7 @@ jobs:
       - create-zip
       - deploy-docs
     name: Create Release and Upload Release Asset
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Create Release
         id: create_release
diff --git a/demos/fleet_provisioning/fleet_provisioning_with_csr/pkcs11_operations.c b/demos/fleet_provisioning/fleet_provisioning_with_csr/pkcs11_operations.c
index bd4b48a899..d2987dc0ab 100644
--- a/demos/fleet_provisioning/fleet_provisioning_with_csr/pkcs11_operations.c
+++ b/demos/fleet_provisioning/fleet_provisioning_with_csr/pkcs11_operations.c
@@ -936,10 +936,12 @@ static int32_t privateKeySigningCallback( mbedtls_pk_context * pContext,
     {
         ret = CKR_ARGUMENTS_BAD;
     }
-
-    mech.mechanism = CKM_ECDSA;
-    memcpy( toBeSigned, pHash, hashLen );
-    toBeSignedLen = hashLen;
+    else
+    {
+        mech.mechanism = CKM_ECDSA;
+        memcpy( toBeSigned, pHash, hashLen );
+        toBeSignedLen = hashLen;
+    }
 
     if( ret == CKR_OK )
     {
diff --git a/demos/http/http_demo_mutual_auth/http_demo_mutual_auth.c b/demos/http/http_demo_mutual_auth/http_demo_mutual_auth.c
index 8204923857..648632e5eb 100644
--- a/demos/http/http_demo_mutual_auth/http_demo_mutual_auth.c
+++ b/demos/http/http_demo_mutual_auth/http_demo_mutual_auth.c
@@ -58,6 +58,11 @@
     #error "Please define a POST_PATH."
 #endif
 
+/**
+ * @brief Delay in seconds between each iteration of the demo.
+ */
+#define DEMO_LOOP_DELAY_SECONDS    ( 5U )
+
 /* Check that a path for Root CA certificate is defined. */
 #ifndef ROOT_CA_CERT_PATH
     #error "Please define a ROOT_CA_CERT_PATH."
@@ -108,6 +113,11 @@
  */
 #define REQUEST_BODY_LENGTH        ( sizeof( REQUEST_BODY ) - 1 )
 
+/**
+ * @brief Number of HTTP paths to request.
+ */
+#define NUMBER_HTTP_PATHS          ( 4 )
+
 /**
  * @brief A buffer used in the demo for storing HTTP request headers and
  * HTTP response headers and body.
@@ -352,61 +362,76 @@ int main( int argc,
     /* Set the pParams member of the network context with desired transport. */
     networkContext.pParams = &opensslParams;
 
-    /**************************** Connect. ******************************/
-
-    /* Establish TLS connection on top of TCP connection using OpenSSL. */
-    if( returnStatus == EXIT_SUCCESS )
+    for( ; ; )
     {
-        LogInfo( ( "Performing TLS handshake on top of the TCP connection." ) );
+        int i = 0;
 
-        /* Attempt to connect to the HTTP server. If connection fails, retry after
-         * a timeout. Timeout value will be exponentially increased till the maximum
-         * attempts are reached or maximum timeout value is reached. The function
-         * returns EXIT_FAILURE if the TCP connection cannot be established to
-         * broker after configured number of attempts. */
-        returnStatus = connectToServerWithBackoffRetries( connectToServer,
-                                                          &networkContext );
+        /**************************** Connect. ******************************/
 
-        if( returnStatus == EXIT_FAILURE )
+        /* Establish TLS connection on top of TCP connection using OpenSSL. */
+        if( returnStatus == EXIT_SUCCESS )
         {
-            /* Log error to indicate connection failure after all
-             * reconnect attempts are over. */
-            LogError( ( "Failed to connect to HTTP server %.*s.",
-                        ( int32_t ) AWS_IOT_ENDPOINT_LENGTH,
-                        AWS_IOT_ENDPOINT ) );
+            LogInfo( ( "Performing TLS handshake on top of the TCP connection." ) );
+
+            /* Attempt to connect to the HTTP server. If connection fails, retry after
+             * a timeout. Timeout value will be exponentially increased till the maximum
+             * attempts are reached or maximum timeout value is reached. The function
+             * returns EXIT_FAILURE if the TCP connection cannot be established to
+             * broker after configured number of attempts. */
+            returnStatus = connectToServerWithBackoffRetries( connectToServer,
+                                                              &networkContext );
+
+            if( returnStatus == EXIT_FAILURE )
+            {
+                /* Log error to indicate connection failure after all
+                 * reconnect attempts are over. */
+                LogError( ( "Failed to connect to HTTP server %.*s.",
+                            ( int32_t ) AWS_IOT_ENDPOINT_LENGTH,
+                            AWS_IOT_ENDPOINT ) );
+            }
         }
-    }
 
-    /* Define the transport interface. */
-    if( returnStatus == EXIT_SUCCESS )
-    {
-        ( void ) memset( &transportInterface, 0, sizeof( transportInterface ) );
-        transportInterface.recv = Openssl_Recv;
-        transportInterface.send = Openssl_Send;
-        transportInterface.pNetworkContext = &networkContext;
-    }
+        /* Define the transport interface. */
+        if( returnStatus == EXIT_SUCCESS )
+        {
+            ( void ) memset( &transportInterface, 0, sizeof( transportInterface ) );
+            transportInterface.recv = Openssl_Recv;
+            transportInterface.send = Openssl_Send;
+            transportInterface.pNetworkContext = &networkContext;
+        }
 
-    /*********************** Send HTTPS request. ************************/
+        /*********************** Send HTTPS requests. ************************/
 
-    if( returnStatus == EXIT_SUCCESS )
-    {
-        returnStatus = sendHttpRequest( &transportInterface,
-                                        HTTP_METHOD_POST,
-                                        HTTP_METHOD_POST_LENGTH,
-                                        POST_PATH,
-                                        POST_PATH_LENGTH );
-    }
+        for( i = 0; i < NUMBER_HTTP_PATHS; i++ )
+        {
+            if( returnStatus == EXIT_SUCCESS )
+            {
+                returnStatus = sendHttpRequest( &transportInterface,
+                                                HTTP_METHOD_POST,
+                                                HTTP_METHOD_POST_LENGTH,
+                                                POST_PATH,
+                                                POST_PATH_LENGTH );
+            }
+            else
+            {
+                break;
+            }
+        }
 
-    if( returnStatus == EXIT_SUCCESS )
-    {
-        /* Log message indicating an iteration completed successfully. */
-        LogInfo( ( "Demo completed successfully." ) );
-    }
+        if( returnStatus == EXIT_SUCCESS )
+        {
+            /* Log message indicating an iteration completed successfully. */
+            LogInfo( ( "Demo completed successfully." ) );
+        }
 
-    /************************** Disconnect. *****************************/
+        /************************** Disconnect. *****************************/
 
-    /* End TLS session, then close TCP connection. */
-    ( void ) Openssl_Disconnect( &networkContext );
+        /* End TLS session, then close TCP connection. */
+        ( void ) Openssl_Disconnect( &networkContext );
+
+        LogInfo( ( "Short delay before starting the next iteration....\n" ) );
+        sleep( DEMO_LOOP_DELAY_SECONDS );
+    }
 
     return returnStatus;
 }
diff --git a/demos/http/http_demo_s3_download/http_demo_s3_download.c b/demos/http/http_demo_s3_download/http_demo_s3_download.c
index 0b73c2d8cb..b1eaf0d4c8 100644
--- a/demos/http/http_demo_s3_download/http_demo_s3_download.c
+++ b/demos/http/http_demo_s3_download/http_demo_s3_download.c
@@ -345,6 +345,8 @@ static SigV4CryptoInterface_t cryptoInterface =
     .hashDigestLen = SHA256_HASH_DIGEST_LENGTH,
 };
 
+static SigV4HttpParameters_t sigv4HttpParams;
+
 /**
  * @brief SigV4 parameters provided to SigV4 library by the application for generating
  * the Authorization header.
@@ -453,7 +455,6 @@ static bool downloadS3ObjectFile( const TransportInterface_t * pTransportInterfa
     size_t curByte = 0;
 
     SigV4Status_t sigv4Status = SigV4Success;
-    SigV4HttpParameters_t sigv4HttpParams;
 
     char * pHeaders = NULL;
     size_t headersLen = 0;
@@ -720,7 +721,6 @@ static bool getS3ObjectFileSize( size_t * pFileSize,
     size_t contentRangeValStrLength = 0;
 
     SigV4Status_t sigv4Status = SigV4Success;
-    SigV4HttpParameters_t sigv4HttpParams;
 
     char * pHeaders = NULL;
     size_t headersLen = 0;
diff --git a/demos/http/http_demo_s3_generate_presigned_url/http_demo_s3_generate_presigned_url.c b/demos/http/http_demo_s3_generate_presigned_url/http_demo_s3_generate_presigned_url.c
index 2c0e0c437f..c81108e989 100644
--- a/demos/http/http_demo_s3_generate_presigned_url/http_demo_s3_generate_presigned_url.c
+++ b/demos/http/http_demo_s3_generate_presigned_url/http_demo_s3_generate_presigned_url.c
@@ -242,6 +242,8 @@ static SigV4CryptoInterface_t cryptoInterface =
     .hashDigestLen = SHA256_HASH_DIGEST_LENGTH,
 };
 
+static SigV4HttpParameters_t sigv4HttpParams;
+
 /**
  * @brief SigV4 parameters provided to SigV4 library by the application for generating
  * the Authorization header.
@@ -273,7 +275,6 @@ static bool printS3ObjectFilePresignedURL( const char * pHost,
     uint8_t userBuffer[ USER_BUFFER_LENGTH ];
 
     SigV4Status_t sigv4Status = SigV4Success;
-    SigV4HttpParameters_t sigv4HttpParams;
 
     char * pHeaders = NULL;
     size_t headersLen = 0;
diff --git a/demos/pkcs11/pkcs11_demo_objects/pkcs11_demo_objects.c b/demos/pkcs11/pkcs11_demo_objects/pkcs11_demo_objects.c
index 27d08ec9e1..9bc973bcbe 100644
--- a/demos/pkcs11/pkcs11_demo_objects/pkcs11_demo_objects.c
+++ b/demos/pkcs11/pkcs11_demo_objects/pkcs11_demo_objects.c
@@ -284,7 +284,7 @@ static CK_RV objectImporting( void )
      *
      * See this explanation for the difference between the PEM format and the
      * DER format:
-     * https://stackoverflow.com/questions/22743415/what-are-the-differences-between-pem-cer-and-der/22743616
+     * https://www.ssl.com/guide/pem-der-crt-and-cer-x-509-encodings-and-conversions/
      *
      */
     if( result == CKR_OK )