suryaparua-official opened a new pull request, #12935:
URL: https://github.com/apache/apisix/pull/12935

   ### Description
   
   This PR fixes an issue where `$ENV://` and `$secret://` certificate 
references
   were not resolved in Stream TLS mode.
   
   While the same configuration works correctly in HTTP, Stream TLS was passing
   the raw reference strings directly to OpenSSL, which resulted in TLS 
handshake
   failures.
   
   ### Root cause
   
   The Stream lifecycle was missing initializations that already exist in HTTP:
   `core.env.init()` and `apisix_secret.init_worker()`.
   
   Because of this, environment variables and secrets were not available when
   certificates were loaded during the TLS handshake.
   
   ### Fix
   
   This change aligns Stream initialization with HTTP by initializing the
   environment and secret subsystems for Stream.
   
   ### Notes
   
   This change follows the same initialization flow already used in HTTP mode
   and addresses the missing setup in Stream TLS.
   
   ### Related issue
   
   Fixes #12934
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to