Andrea Cosentino created CAMEL-24999:
----------------------------------------

             Summary: camel-hivemq: ssl option is missing security=insecure:ssl 
annotation for the security policy framework
                 Key: CAMEL-24999
                 URL: https://issues.apache.org/jira/browse/CAMEL-24999
             Project: Camel
          Issue Type: Improvement
            Reporter: Andrea Cosentino


The ssl option in HiveMQConfiguration controls whether TLS is used for the MQTT 
broker connection. It defaults to false (plaintext). The @UriParam annotation 
does not have the security = "insecure:ssl" attribute set, so the Camel 
security policy framework (under the prod profile) cannot detect or warn about 
a deployment running without TLS.

Sibling components annotate their equivalent options correctly (e.g. 
camel-pinecone disableTls, PineconeVectorDbConfiguration line 62).

The fix is a one-line annotation change in HiveMQConfiguration:

  @UriParam(defaultValue = "false", label = "security", security = 
"insecure:ssl", insecureValue = "false")
  private boolean ssl;

Affected file:
- 
components/camel-hivemq/src/main/java/org/apache/camel/component/hivemq/HiveMQConfiguration.java



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to