BewareMyPower opened a new issue, #363:
URL: https://github.com/apache/pulsar-client-cpp/issues/363

   ### Search before asking
   
   - [X] I searched in the 
[issues](https://github.com/apache/pulsar-client-cpp/issues) and found nothing 
similar.
   
   
   ### Version
   
   OS: macOS m1
   Client: https://archive.apache.org/dist/pulsar/pulsar-client-cpp-3.4.1/
   
   ### Minimal reproduce step
   
   The same reproduce steps with 
https://github.com/apache/pulsar-client-cpp/issues/184
   
   ### What did you expect to see?
   
   <none>
   
   ### What did you see instead?
   
   Even if `setTlsTrustCertsFilePath` is configured, the OAuth2 authentication 
will still fail.
   
   ```
   2023-12-05 15:30:28.066 ERROR [0x16d9c7000] AuthOauth2:390 | Response failed 
for issuerurl <...>. ErrorCode 60: SSL certificate problem: unable to get local 
issuer certificate passedin: 
   ```
   
   ### Anything else?
   
   It's a regression brought by 
https://github.com/apache/pulsar-client-cpp/pull/313, the 
`tlsTrustCertsFilePath` config didn't work for OAuth2.
   
   
https://github.com/apache/pulsar-client-cpp/blob/63d494f57df126cf633396c618886eeb79946408/lib/auth/AuthOauth2.cc#L346
   
   The last argument is `nullptr`, i.e. `CurlWrapper` does not load any CA 
certs for `AuthOauth2::authenticate`.
   
   While you can see it's applied in 
https://github.com/apache/pulsar-client-cpp/blob/63d494f57df126cf633396c618886eeb79946408/lib/auth/AuthOauth2.cc#L232-L237
   
   ### Are you willing to submit a PR?
   
   - [ ] I'm willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to