aashish-confluent opened a new pull request, #24019: URL: https://github.com/apache/kafka/pull/24019
#24010 also started treating a rule that produces an empty name as not matching. That changes the principal for common rules: for example, with RULE:^.*[Cc][Nn]=([a-zA-Z0-9.]*).*$/$1/L from the docs, a certificate with CN=_svc used to map to an empty name and now maps to the next rule (or fails authentication without DEFAULT). Revert that part so these rules behave as before. Add a 4.5.0 upgrade note for the change in how rules that are not anchored with both ^ and $, or that use alternation, build the principal name. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
