Fixed some typos, courtesy of codespell

src/libcharon/plugins/forecast/forecast_listener.c

@@ -76,7 +76,7 @@ typedef struct {
 	u_int32_t spi;
 	/** use UDP encapsulation */
 	bool encap;
-	/** wheter we should allow reencapsulation of IPsec received forecasts */
+	/** whether we should allow reencapsulation of IPsec received forecasts */
 	bool reinject;
 	/** broadcast address used for that entry */
 	u_int32_t broadcast;

src/libcharon/sa/child_sa.c

@@ -1293,7 +1293,7 @@ child_sa_t * child_sa_create(host_t *me, host_t* other,
 		 * reqid cache would find the same reqid for our selectors, this does
 		 * not work in a special case: If an SA is triggered by a trap policy,
 		 * but the negotiated SA gets narrowed, we still must reuse the same
-		 * reqid to succesfully "trigger" the SA on the kernel level. Rekeying
+		 * reqid to successfully "trigger" the SA on the kernel level. Rekeying
 		 * such an SA requires an explicit reqid, as the cache currently knows
 		 * the original selectors only for that reqid. */
 		if (rekey)

src/libtnccs/plugins/tnccs_20/tnccs_20_handler.h

@@ -90,7 +90,7 @@ struct tnccs_20_handler_t {
 	/**
 	 * Handle errors that occurred during PB-TNC batch header processing
 	 *
-	 * @param batch			batch where a fatal error occured
+	 * @param batch			batch where a fatal error occurred
 	 */
 	void (*handle_errors)(tnccs_20_handler_t *this, pb_tnc_batch_t *batch);