This is an automated email from the ASF dual-hosted git repository.
oscerd pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git
The following commit(s) were added to refs/heads/main by this push:
new fe500a5f4b25 CAMEL-24790: camel-oauth - remove unused expired demo
certificate and private key (#26545)
fe500a5f4b25 is described below
commit fe500a5f4b25c0132934c07708e76ee8b5e5ee48
Author: Andrea Cosentino <[email protected]>
AuthorDate: Thu Sep 17 11:24:04 2026 +0200
CAMEL-24790: camel-oauth - remove unused expired demo certificate and
private key (#26545)
Co-authored-by: Claude Opus 4.8 <[email protected]>
---
components/camel-oauth/helm/etc/cluster.crt | 35 ---------------
components/camel-oauth/helm/etc/cluster.key | 52 ----------------------
.../apache/camel/test/oauth/SSLCertTrustTest.java | 36 ---------------
3 files changed, 123 deletions(-)
diff --git a/components/camel-oauth/helm/etc/cluster.crt
b/components/camel-oauth/helm/etc/cluster.crt
deleted file mode 100644
index 0ff6df66bdea..000000000000
--- a/components/camel-oauth/helm/etc/cluster.crt
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIGAzCCA+ugAwIBAgIUeywSjuXbYP8erVjEI4UrN/HNEYQwDQYJKoZIhvcNAQEL
-BQAwcTELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVN0YXRlMQ0wCwYDVQQHDARDaXR5
-MRUwEwYDVQQKDAxPcmdhbml6YXRpb24xDTALBgNVBAsMBFVuaXQxHTAbBgNVBAMM
-FENhbWVsIENsb3VkIEV4YW1wbGVzMB4XDTI1MDQxNjA5NDIxMVoXDTI2MDQxNjA5
-NDIxMVowcTELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVN0YXRlMQ0wCwYDVQQHDARD
-aXR5MRUwEwYDVQQKDAxPcmdhbml6YXRpb24xDTALBgNVBAsMBFVuaXQxHTAbBgNV
-BAMMFENhbWVsIENsb3VkIEV4YW1wbGVzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
-MIICCgKCAgEArhvNUlm3C4m3S4z/y/EGDfPN2HHinP6lE7jUDslpafGJ4becZIxI
-WkGEDOb4AKGQn0fIRmybY91UJ54IPMuELG24ilO3KRp4QXMPR0PiXb2ddBcm10Bs
-sEIiv+q056UDZrY5u63WX1Tf18On6Z1gd1XvqfjIkH+V0OSO1Kj3S5AbdpZuAQ2M
-dGZUOeZEaWTlLJ5LyScs2AB5u4OCPXZo0iVg/r8KZmxATQr51rlAA0UOpmd+tuL4
-uQBhYNZb/o7TwXLjQzTbxGtstKNHeSMjyU6PH5rRvVETZhHO3etoPNv0BCIbmGt0
-n97WtHlwnpDFfQizy2mDYcVrCWgPIvKrRhicclUU7sFHI6538cv1uXHqpdg+ceCK
-sEWnvWbKNlzbDaeJyYiPiN7EkT2x+TQUGp2cI2zsiE3Rqz70SsvZstVn5ANCsM4Q
-cT/oTrDbxOzNFrOF1UV69qAiN0CT8T1tLfD+vssdbrT1nxvD+gqaWryIlWm1o1PR
-yebKI2zyc8SsJo3eKEzy4B47q8E9VcwYC1FfPT43Zrb7ReUA4xF8OKTBG6sXT492
-YWH6gE+Uq2uyWuYItGQXMcCgv4kw+kEORRE0lUnhHgXdBNLxgvBbGtIeneynFilP
-el+OkgbMSQQcv1yCFui3jYQUAMmb0J87uRbIdhznHgYNiAcitv6tKOECAwEAAaOB
-kjCBjzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwSQYDVR0R
-BEIwQIINZXhhbXBsZS5sb2NhbIILZXhhbXBsZS5rM3OCDmtleWNsb2FrLmxvY2Fs
-ggxrZXljbG9hay5rM3OHBH8AAAEwHQYDVR0OBBYEFJlmlVUIw84koLyZgjVkw1ML
-poHFMA0GCSqGSIb3DQEBCwUAA4ICAQADtlbezj17kdEI5S2+6//yFSYqtyjPKNLf
-/E2gdS9/xoSo/bnXQ/0kUsmtOhuRJ/+eD3x+EzVTDRetZh/t5qF0W5OlOidGdgCA
-xL+VSjAHaWvLzhMmd4jdKOG/MKZksPZru2qlFzhKhP78Ic1Nfs2rfYkiiFU8Ct/c
-ieOwIhjs8XfueTc1tAo79034ytraswjIyF0+aeGehzfN7yq2/7g8KxzycJ6R/c8Z
-yA+VyQqXpX962GjN5e2HV+aWR9vHNTtFpb3WUnai2sgsirvA6jVi0ct0ZNpwgCdz
-rKqPLjsQHxJ92WqXgqYBeg1O+Qtg60YAR4kmYaq5Jw344RJl+Z86IKprwRFXZ08U
-abJOEhYIV/yhfTo3WGTK0epu4fIaNqI1lS9S5oQ/LZYClVKXgraUkMFs+URIyF/I
-EfIFSnm+sWNVC1LWb3ztRnonE4ntiD+UjxijX9nJJT6m6Wai99UZ8fX4QNmkjGsm
-ev+ma3ketRhvDt52r0U2IHiuQ+4z9xd6ep+Q5529nVmGJ3gtVBP/zzFS3GhJigDk
-N2USmcRTUN2NsXLlti8T3l389eYCWF0biOicv7e6sa1KBuOWoN55ox8kWOHlOoVo
-dSXf2bUOys4QRfOQlX94qZZhWN6QQOsPO6dSSRP/HHuxApSi4s4flo6W2SkSs2F/
-SN6HJNOF9Q==
------END CERTIFICATE-----
diff --git a/components/camel-oauth/helm/etc/cluster.key
b/components/camel-oauth/helm/etc/cluster.key
deleted file mode 100644
index 6dec46e3d8f5..000000000000
--- a/components/camel-oauth/helm/etc/cluster.key
+++ /dev/null
@@ -1,52 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCuG81SWbcLibdL
-jP/L8QYN883YceKc/qUTuNQOyWlp8Ynht5xkjEhaQYQM5vgAoZCfR8hGbJtj3VQn
-ngg8y4QsbbiKU7cpGnhBcw9HQ+JdvZ10FybXQGywQiK/6rTnpQNmtjm7rdZfVN/X
-w6fpnWB3Ve+p+MiQf5XQ5I7UqPdLkBt2lm4BDYx0ZlQ55kRpZOUsnkvJJyzYAHm7
-g4I9dmjSJWD+vwpmbEBNCvnWuUADRQ6mZ3624vi5AGFg1lv+jtPBcuNDNNvEa2y0
-o0d5IyPJTo8fmtG9URNmEc7d62g82/QEIhuYa3Sf3ta0eXCekMV9CLPLaYNhxWsJ
-aA8i8qtGGJxyVRTuwUcjrnfxy/W5ceql2D5x4IqwRae9Zso2XNsNp4nJiI+I3sSR
-PbH5NBQanZwjbOyITdGrPvRKy9my1WfkA0KwzhBxP+hOsNvE7M0Ws4XVRXr2oCI3
-QJPxPW0t8P6+yx1utPWfG8P6CppavIiVabWjU9HJ5sojbPJzxKwmjd4oTPLgHjur
-wT1VzBgLUV89PjdmtvtF5QDjEXw4pMEbqxdPj3ZhYfqAT5Sra7Ja5gi0ZBcxwKC/
-iTD6QQ5FETSVSeEeBd0E0vGC8Fsa0h6d7KcWKU96X46SBsxJBBy/XIIW6LeNhBQA
-yZvQnzu5Fsh2HOceBg2IByK2/q0o4QIDAQABAoICAAG3r35U+TvJZ3/8y5cw8PzZ
-P1oXwYMH9gvsQldFAF+1rMUHwSiyw5H0XH+eFas37MvNcvnS33OMPuTHJ9Clt0+S
-44Ol0MQ8iRwoLOnojwaatL9s7QqpjYjtlhcrkw5H7/Em8gnabKdzGGQx/2mMDmQO
-+nbESAI45/rwDkKlyg66RLMWR86F2jFZwxHxJhKeFq6qfxfkZYpZ8tl5MiM2FFGi
-YcMRkmIxRi8cYRuPp0SA/WSB19upAIgeq1c/thecRBV/8yL6FgLphmB/zdgxkwxM
-1JecuN3zu0vB+DbzOAuFpfIWfgwyXyumkJqmKgi+Z9xUZiWnDE8+GdC1cJTJLQxX
-S+Zm0b48C/dfBKiWMZK3aU6SZTUgwp1Nt6i7bhRUJZkQ4ZOqh8/cjeqvh8hVzGdH
-Zb46mNlJXbyly6xqNq9v6y9KXoYGOaqreYwZrSjdJ5EWxDBnqi6I71+45KrL7AMm
-zcpEvIh0QgifNaNQ1VgWa/e1A2i3BWYRt7kcMBInvYUH4DEgVJ0bBz5UllrSDF95
-T1ITYvZjJe4QABfm7lInCVJUqg4n7g8FaLYBGGAjqNcH/UbtKKpvVfeu0q8Le/XB
-6EasRYLAYoaVP95IJovWUJw0AaH/lairR9fau6vdnExeRyjQinzrHptD10XAEcDM
-bAwXODPN1fd8slvhzgyDAoIBAQDiWogf+kB5jbr1LiKgImFeKNROR88NOEgTUICM
-yQiwXVoBmk8JuMHndK5eAvGGWFJyvjK/x30XiwjwBLXf8cS4bBSPX53DbLNtPqy0
-4XoDYRxiC9fH9KiPw+8iOfSoldqBZb794RiMbfJZnZ5Y2dEyfocBfx9PeT4t7FZE
-Q23MATSbV2Kw7CkedjYUFSgIp6EJnKoICaYSei75S8vdBVbHfIPKsK8RVg8P4ynB
-uKew8y51nC0HwSpTUQB1J4tNYKKWijxixCWySL5pPOOUgcnBqMi3Imb/rklh0/ts
-X8J0TaX+FtM2IRTwqrqFATR/AgkhkspjLIKZ43WjL2OPuOTzAoIBAQDE6YiDDfz3
-ECks5vicBas9IKl3Cze54h80iI6V+I/8HJpQWPzthgpV1zc88v5XUNZNtE/48ZzY
-0NMy5Gk16gxdSCa+mkGrIhmiRG44dZ+5iS8MqgiitlZVTfv8JKcDym1x/yILFj9G
-O7HPT+0Hnbjzi7Ar+m9BesMc7uWMAKgzAVvpugzgb3n2U96tesbY8X7MfoMXrFtt
-I8DSsvOOqL4VtIJ/08pGNVPq2M7PcQHvBi0Zx9XKLvzu1ccUrwEzCGqAMiLVOK3s
-g9rLur9s8ayXHSBmFzG/11cHbOxNZVvh6NiYnem7LfLj+6JakN9Oja/jc6LoiUxo
-46hmyIdwkL/bAoIBAHm0v9ih0CULhejqw4ditQPR5EWq6rNq/aYU9Om99kQODaUq
-+TB6/Recb1zxLDhWKQ61IchoVORhx452mewtrN6UjoGAoe0/90HYHziqu9YxUveM
-8pr6+99BNMUscFZtLK3CrW0IqRBo1ZRF4axYgdkqmyC833L19+7tUn0l3FWCmGym
-EdSbRoiweudVcM8mgroOWIY12eu5cqRsktLmWgCs/JfxZFBn+3VJaVxWEyRbvTFT
-pgqzXDSsKxjTCF20hfd3oHxihvpTjr47FQr2tirAvBtsDgGQDrjhKCDfZEjwrz3t
-u+cw5nd49Q0q1rUrvQkmSlgEyLxBxzDU/C189u0CggEBAKNXhaIRDHJ1uXJB9qCW
-I0IFwg26BHPxmykczgqhse7UWz2jU8xEkHY8nNm2SD1uFRdIJ769zfoc39UrnArZ
-J4CJxXn+w9KN6u2sDjJPgDuMDLdYpOk0j9Eba5fxX4nJdZhGp5rCzaIZCpqKFnlm
-4HFGwtD4YSnUB94MXeYQ9XW5/uCXMO9MCcPINsN5QVHcoe5IU75jf0O9kMo3H8qL
-N4MRxd77dKNgwUfiqUty1sPMP8VO+41IBRCpzQbfVQNcS9wjurlc1wmHJwww0XIx
-15VS1/lX7DDTFKJYPHzHQ7zWRjXzaFuY9g8gQcEWw+aJqgnndo+mtPedQahhV9iM
-elkCggEAUaKPz6ulzFxD7GzT/3aYDizEV33kEG2r+oCiY5E9EQcT79GwW7QEXjAt
-nJLx0sz4euJWWNiUS+GKQc0bF8jRULV9f6sFnX0qtCs9isS53Mv8LG8qaOMPqhMs
-ur3ogvLmKFWXSY78mgY8lB340PRSGoMQMd+m2OYawhMK46n8n19KbLVDfcpjAjqX
-kV9VTaEoN22mxYzFR18zyH5h5iAOtqFEbn4BkElRjsVNJMwuSifssxl53MUEFSPz
-eOrcqB2hzf9nOyc5QD8TCtZZ9ZfEbsxOPyyOyBUR/ArpvwE0HTtUlKhoqnidcyHN
-cyF0v3vPPJvlUdKcVlyOQKGO2NvySQ==
------END PRIVATE KEY-----
diff --git
a/components/camel-oauth/src/test/java/org/apache/camel/test/oauth/SSLCertTrustTest.java
b/components/camel-oauth/src/test/java/org/apache/camel/test/oauth/SSLCertTrustTest.java
index 49cb200d93ae..07a6cf653eca 100644
---
a/components/camel-oauth/src/test/java/org/apache/camel/test/oauth/SSLCertTrustTest.java
+++
b/components/camel-oauth/src/test/java/org/apache/camel/test/oauth/SSLCertTrustTest.java
@@ -16,22 +16,16 @@
*/
package org.apache.camel.test.oauth;
-import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.URI;
import java.security.KeyStore;
-import java.security.cert.CertificateException;
-import java.security.cert.CertificateFactory;
-import java.security.cert.X509Certificate;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLHandshakeException;
import javax.net.ssl.SSLServerSocket;
-import javax.net.ssl.TrustManagerFactory;
-import javax.net.ssl.X509TrustManager;
import org.junit.jupiter.api.AfterAll;
import org.junit.jupiter.api.Assertions;
@@ -105,36 +99,6 @@ class SSLCertTrustTest extends AbstractKeycloakTest {
}
}
- @Test
- void testCheckClusterCertificateTrust() throws Exception {
-
- // Load certificate to check
- CertificateFactory cf = CertificateFactory.getInstance("X.509");
- FileInputStream fis = new FileInputStream("helm/etc/cluster.crt");
- X509Certificate cert = (X509Certificate) cf.generateCertificate(fis);
-
- // Load default Java truststore
- FileInputStream trustStream = new
FileInputStream(System.getProperty("java.home") + "/lib/security/cacerts");
- KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
- trustStore.load(trustStream, "changeit".toCharArray());
-
- // Initialize TrustManager
- TrustManagerFactory tmf =
TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
- tmf.init(trustStore);
-
- try {
- for (var tm : tmf.getTrustManagers()) {
- var xtm = (X509TrustManager) tm;
- xtm.checkServerTrusted(new X509Certificate[] { cert }, "RSA");
- }
- } catch (CertificateException ex) {
- LOG.error("Untrusted, because of: ", ex);
- return;
- }
-
- LOG.info("Trusted");
- }
-
@Test
void testCheckKeycloakCertificateTrust() {
var admin = new KeycloakAdmin(new
KeycloakAdmin.AdminParams(KEYCLOAK_BASE_URL));
