This is an automated email from the ASF dual-hosted git repository.
penghui pushed a change to branch branch-2.8
in repository https://gitbox.apache.org/repos/asf/pulsar.git
from 98843214d51 [branch-2.8][fix][broker] Avoid heartbeat topic to
offload. (#15393)
new 4ee88f9b640 Use tlsCertRefreshCheckDurationSec instead of 0 for
refresh value (#15075)
new 55d41bef714 Add KeyStore support in WebSocket, Function Worker HTTPS
Servers (#15084)
new b28f5413c89 [improve][broker-web&websocket&proxy&function-worker]
Full-support set ssl provider, ciphers and protocols (#13740)
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
conf/broker.conf | 5 +
conf/functions_worker.yml | 40 +++++
conf/proxy.conf | 32 ++++
conf/standalone.conf | 3 +
conf/websocket.conf | 35 ++++
docker/pulsar/scripts/gen-yml-from-env.py | 4 +-
.../apache/pulsar/broker/ServiceConfiguration.java | 23 ++-
.../org/apache/pulsar/jetty}/package-info.java | 2 +-
.../pulsar/jetty/tls/JettySslContextFactory.java | 116 +++++++++++++
.../org/apache/pulsar/jetty/tls}/package-info.java | 2 +-
.../jetty/tls/JettySslContextFactoryTest.java | 174 +++++++++++++++++++
.../JettySslContextFactoryWithKeyStoreTest.java | 193 +++++++++++++++++++++
.../src/test/resources/ssl/jetty_client_key.jks | Bin
.../src/test/resources/ssl/jetty_client_trust.jks | Bin
.../src/test/resources/ssl/jetty_server_key.jks | Bin
.../src/test/resources/ssl/jetty_server_trust.jks | Bin
.../src/test/resources/ssl/my-ca/ca.pem | 0
.../src/test/resources/ssl/my-ca/client-ca.pem | 0
.../src/test/resources/ssl/my-ca/client-key.pem | 0
.../src/test/resources/ssl/my-ca/server-ca.pem | 0
.../src/test/resources/ssl/my-ca/server-key.pem | 0
.../org/apache/pulsar/broker/PulsarService.java | 2 +
.../org/apache/pulsar/broker/web/WebService.java | 16 +-
.../proxy/ProxyPublishConsumeTlsTest.java | 2 +-
pulsar-common/pom.xml | 5 -
.../common/util/DefaultSslContextBuilder.java | 23 ++-
.../apache/pulsar/common/util/SecurityUtility.java | 74 +++-----
.../util/keystoretls/KeyStoreSSLContext.java | 57 +-----
.../SslContextFactoryWithAutoRefresh.java | 66 -------
.../discovery/service/server/ServerManager.java | 13 +-
.../pulsar/functions/worker/WorkerConfig.java | 78 ++++++++-
.../worker/WorkerApiV2ResourceConfigTest.java | 18 +-
.../functions/worker/PulsarWorkerService.java | 11 +-
.../pulsar/functions/worker/rest/WorkerServer.java | 40 ++++-
.../pulsar/proxy/server/AdminProxyHandler.java | 14 +-
.../pulsar/proxy/server/ProxyConfiguration.java | 21 +++
.../org/apache/pulsar/proxy/server/WebServer.java | 15 +-
.../pulsar/websocket/service/ProxyServer.java | 40 +++--
.../service/WebSocketProxyConfiguration.java | 64 ++++++-
39 files changed, 946 insertions(+), 242 deletions(-)
copy {pulsar-broker/src/main/java/org/apache/pulsar =>
pulsar-broker-common/src/main/java/org/apache/pulsar/jetty}/package-info.java
(96%)
create mode 100644
pulsar-broker-common/src/main/java/org/apache/pulsar/jetty/tls/JettySslContextFactory.java
copy {pulsar-broker/src/main/java/org/apache/pulsar =>
pulsar-broker-common/src/main/java/org/apache/pulsar/jetty/tls}/package-info.java
(95%)
create mode 100644
pulsar-broker-common/src/test/java/org/apache/pulsar/jetty/tls/JettySslContextFactoryTest.java
create mode 100644
pulsar-broker-common/src/test/java/org/apache/pulsar/jetty/tls/JettySslContextFactoryWithKeyStoreTest.java
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/jetty_client_key.jks (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/jetty_client_trust.jks (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/jetty_server_key.jks (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/jetty_server_trust.jks (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/my-ca/ca.pem (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/my-ca/client-ca.pem (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/my-ca/client-key.pem (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/my-ca/server-ca.pem (100%)
copy {pulsar-common =>
pulsar-broker-common}/src/test/resources/ssl/my-ca/server-key.pem (100%)
delete mode 100644
pulsar-common/src/main/java/org/apache/pulsar/common/util/keystoretls/SslContextFactoryWithAutoRefresh.java
