oscerd commented on issue #1667: URL: https://github.com/apache/camel-kafka-connector/issues/1667#issuecomment-6632366998
A correction to the comment above: the `sslContextParameters` option added to the `opensearch-index-sink` Kamelet does not cover hostname verification. In Camel's OpenSearch producer (4.22.0 and 4.23.0), `sslContextParameters` only provides the SSL context. The hostname verifier comes solely from the endpoint option `hostnameVerifier` (added in CAMEL-21207), and none of the OpenSearch Kamelets expose that option yet. Turning hostname verification off therefore still needs a Kamelet change. Until then, the safe alternative is to connect with a host name that matches the server certificate, or to add the address you use to the certificate's subject alternative names. --- _Claude Code on behalf of Andrea Cosentino_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
