You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@rocketmq.apache.org by GitBox <gi...@apache.org> on 2026/05/09 10:31:00 UTC

[GH] (rocketmq/worktree-sni-multi-domain): Workflow run "Build and Run Tests by Maven" failed!

The GitHub Actions job "Build and Run Tests by Maven" on rocketmq.git/worktree-sni-multi-domain has failed.
Run started by GitHub user qianye1001 (triggered by qianye1001).

Head commit for run:
71fcbbdfa8c3cd2f929f5f4ccb89fd90be6a7c93 / sa-buc <wu...@mq-meta011160073084.cm10>
[ISSUE #XXXXX] Add SNI multi-domain certificate support for Proxy TLS

Introduce Server Name Indication (SNI) support to allow RocketMQ Proxy
to serve multiple TLS domains (e.g. *.alibaba-inc.com, *.rocketmq.com)
with independent certificates on the same port.

Key changes:
- New TlsDomainConfig POJO for per-domain cert/key configuration
- New TlsSniManager for wildcard-aware SslContext management
- Extended TlsCertificateManager for multi-domain file watching
- ProxyAndTlsProtocolNegotiator uses SniHandler for SNI-aware TLS
- NettyRemotingServer TlsModeHandler uses TlsContextProvider bridge
- TlsContextProvider in remoting module for SNI context lookup
- Backward compatible: single cert behavior unchanged when no
  tlsDomainConfigs is configured

Co-Authored-By: Claude Opus 4.7 <no...@anthropic.com>

Report URL: https://github.com/apache/rocketmq/actions/runs/25598893044

With regards,
GitHub Actions via GitBox