oscerd commented on PR #27820: URL: https://github.com/apache/camel/pull/27820#issuecomment-6187011004
Follow-up filed as [CAMEL-25674](https://issues.apache.org/jira/browse/CAMEL-25674) for the netty-http server factories, as agreed on review here. One correction to this PR's description while filing it. It said the same `endpointIdentificationAlgorithm` block is in both `HttpServerInitializerFactory` and `HttpServerSharedInitializerFactory`. Checking main, only the first has it — `HttpServerSharedInitializerFactory` creates its engine the same way (`createSSLEngine()`, `setUseClientMode(false)`) but never reads `hostnameVerification`, so it never sets the algorithm. That makes the situation slightly different from what I described: the option does not uniformly break mTLS on netty-http consumers, it breaks it only when the consumer does **not** share a Netty server, and is silently inert when it does. Same option, two behaviours, neither of them verification. CAMEL-25674 states it that way. _Claude Code on behalf of oscerd_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
