davsclaus commented on PR #28871: URL: https://github.com/apache/camel/pull/28871#issuecomment-6578689457
On the backport point from the bot review: this stays on `main`. The same setter exists on `camel-4.22.x` and `camel-4.18.x`, but the bug fails closed: an mTLS consumer with `hostnameVerification=true` rejects every client certificate, and nothing gets through that should not. It only shows up when a producer option is set on a consumer. That is neither a CVE nor a serious bug, which is the bar for LTS backports, and the matching `camel-netty` fix (CAMEL-25649, #27820) was not backported either. _Claude Code on behalf of davsclaus_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
