[
https://issues.apache.org/jira/browse/CAMEL-26828?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Ibsen updated CAMEL-26828:
--------------------------------
Fix Version/s: 4.24.0
> camel-spiffe - define cleanup ownership for standalone SSL contexts
> -------------------------------------------------------------------
>
> Key: CAMEL-26828
> URL: https://issues.apache.org/jira/browse/CAMEL-26828
> Project: Camel
> Issue Type: Bug
> Components: camel-spiffe
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Major
> Labels: authorization, camel-spiffe, component-audit
> Fix For: 4.24.0
>
>
> h2. Problem / motivation
> SpiffeSSLContextParameters creates an active X509Source, but
> registerForShutdown silently skips registration when neither the method
> argument nor the bean supplies a CamelContext. Unlike the base
> SSLContextParameters standalone API, this creates a live watcher without an
> exposed close handle.
> h2. Proposed scope
> Define explicit ownership: require an owning context before opening a source,
> or provide a supported standalone close lifecycle. Keep context-owned
> shutdown and restart behavior intact; document any API compatibility
> implications.
> h2. Acceptance criteria / validation
> * Test a null argument with an associated context and a truly standalone
> instance.
> * Test successful shutdown, source creation failure, repeated close and
> context restart.
> * No opened source remains unmanaged after successful creation or failure.
> h2. References
> *
> https://github.com/apache/camel/blob/5686684cb418/components/camel-spiffe/src/main/java/org/apache/camel/component/spiffe/SpiffeSSLContextParameters.java#L134
> *
> https://github.com/apache/camel/blob/5686684cb418/core/camel-api/src/main/java/org/apache/camel/support/jsse/SSLContextParameters.java#L251
> Source: read-only component audit at 5686684cb418. Recheck current main
> before implementing; historical references identify the audited code.
> _AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
