Claus Ibsen created CAMEL-25105:
-----------------------------------
Summary: camel-netty - The client authentication of
sslContextParameters is overridden by needClientAuth=false
Key: CAMEL-25105
URL: https://issues.apache.org/jira/browse/CAMEL-25105
Project: Camel
Issue Type: Bug
Components: camel-netty, camel-netty-http
Reporter: Claus Ibsen
A camel-netty (and camel-netty-http) consumer using {{sslContextParameters}}
does not use the client authentication configured in the server parameters of
the sslContextParameters ({{SSLContextServerParameters.clientAuthentication}},
or {{camel.ssl.clientAuthentication}} with global SSL).
The SSLEngine created from the sslContextParameters is configured with the
client authentication (such as REQUIRE), but afterwards the consumer calls
{{engine.setNeedClientAuth(needClientAuth)}} with the endpoint option, which is
false by default, so the client authentication is turned off (also WANT).
Affected: DefaultServerInitializerFactory (camel-netty),
HttpServerInitializerFactory and HttpServerSharedInitializerFactory
(camel-netty-http).
The fix only sets need client authentication when the needClientAuth option is
enabled.
_Claude Code on behalf of Claus Ibsen_
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
