[
https://issues.apache.org/jira/browse/CAMEL-25105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Ibsen resolved CAMEL-25105.
---------------------------------
Resolution: Fixed
Fixed by https://github.com/apache/camel/pull/27009
> camel-netty - The client authentication of sslContextParameters is overridden
> by needClientAuth=false
> -----------------------------------------------------------------------------------------------------
>
> Key: CAMEL-25105
> URL: https://issues.apache.org/jira/browse/CAMEL-25105
> Project: Camel
> Issue Type: Bug
> Components: camel-netty, camel-netty-http
> Reporter: Claus Ibsen
> Assignee: Claus Ibsen
> Priority: Major
> Fix For: 4.23.0
>
>
> A camel-netty (and camel-netty-http) consumer using {{sslContextParameters}}
> does not use the client authentication configured in the server parameters of
> the sslContextParameters
> ({{SSLContextServerParameters.clientAuthentication}}, or
> {{camel.ssl.clientAuthentication}} with global SSL).
> The SSLEngine created from the sslContextParameters is configured with the
> client authentication (such as REQUIRE), but afterwards the consumer calls
> {{engine.setNeedClientAuth(needClientAuth)}} with the endpoint option, which
> is false by default, so the client authentication is turned off (also WANT).
> Affected: DefaultServerInitializerFactory (camel-netty),
> HttpServerInitializerFactory and HttpServerSharedInitializerFactory
> (camel-netty-http).
> The fix only sets need client authentication when the needClientAuth option
> is enabled.
> _Claude Code on behalf of Claus Ibsen_
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
