JiriOndrusek opened a new issue, #9471:
URL: https://github.com/apache/camel-quarkus/issues/9471

   The `http-pqc-j21` example needs Bouncy Castle (BCJSSE) for hybrid 
post-quantum TLS 1.3 (`X25519MLKEM768`), because JDK 21 has no such support yet 
(Oracle plans it for H1 2027).
   
   Since the October 2026 update, JDK 25 (25.0.5+) supports hybrid key exchange 
natively (JEP 527), and the Quarkus TLS registry exposes it 
(`quarkus.tls.key-exchange-groups`, `quarkus.tls.pqc-enforcement-policy`).
   
   Proposal: add an `http-pqc-j25` example that shows the same use case with no 
Bouncy Castle:
   - TLS configured only through the Quarkus TLS registry (JDK SSL engine)
   - certificates generated with `keytool`
   - tests: a PQC-only server rejects classical-only clients; a fallback server 
accepts both
   - requires JDK 25.0.5+ or 27; tests are skipped on older JDKs
   
   _Generated with [Claude Code](https://claude.com/claude-code) on behalf of 
@JiriOndrusek_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to