You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by lh...@apache.org on 2026/08/13 07:01:57 UTC
(pulsar) branch lh-pip-478-auth-plugins-v3 updated (6ef9083f94fb -> 5a6e8a807471)
This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a change to branch lh-pip-478-auth-plugins-v3
in repository https://gitbox.apache.org/repos/asf/pulsar.git
discard 6ef9083f94fb [improve][misc] PIP-478: remove the superseded PIP-337 TLS stack (#26320)
discard e72a090dfd58 [fix][client] PIP-478: review fixes for the Athenz and SASL v5 plugins
discard 51f890669f1a [test][client] PIP-478: pin that the SASL binary body off-loads GSSAPI work
discard e73d8a99b213 [improve][client] PIP-478: Athenz and SASL v5 authentication plugins
discard 8eba5ce5283b [fix][client] PIP-478: never resolve a credential on the caller thread
discard 6c7465dffabd [fix][client] PIP-478: derive the driven authentication from the current configuration
discard d9be88064b43 [fix][client] PIP-478: queue rather than reject shared credential work
discard 2462878ce77c [fix][client] PIP-478: carry the v5 authentication through swap and close
discard fad06cc05fa1 [fix][client] PIP-478: confine the fallback executor to the v4 bridge
discard 9f0c7c2c9f48 [fix][client] PIP-478: give a bridged v4 plugin an executor when no client owns it
discard 2ed66f606a2d [improve][client] PIP-478: drive the v5 authentication model natively in the client
discard b5fc22705f67 [improve][client] PIP-478: give the v5 client a native "none" authentication
add 71e08a7caa24 [improve][client] PIP-478: give the v5 client a native "none" authentication
add 1ca14dc0f147 [improve][client] PIP-478: drive the v5 authentication model natively in the client
add 0a97aeee1399 [fix][client] PIP-478: give a bridged v4 plugin an executor when no client owns it
add 8a8da5fb91e2 [fix][client] PIP-478: confine the fallback executor to the v4 bridge
add ff5f840af104 [fix][client] PIP-478: carry the v5 authentication through swap and close
add 5ac0f1a9ddb6 [fix][client] PIP-478: queue rather than reject shared credential work
add 2949b86d7ec2 [fix][client] PIP-478: derive the driven authentication from the current configuration
add 4811c9f08885 [fix][client] PIP-478: never resolve a credential on the caller thread
add 0307279960d8 [improve][client] PIP-478: Athenz and SASL v5 authentication plugins
add c0f13e21830e [test][client] PIP-478: pin that the SASL binary body off-loads GSSAPI work
add 5a6e8a807471 [fix][client] PIP-478: review fixes for the Athenz and SASL v5 plugins
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (6ef9083f94fb)
\
N -- N -- N refs/heads/lh-pip-478-auth-plugins-v3 (5a6e8a807471)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
pip/pip-478.md | 12 +-
pulsar-broker-common/build.gradle.kts | 2 +-
.../pulsar/broker/tls/TlsFactorySupport.java | 2 +-
pulsar-client-messagecrypto-bc/build.gradle.kts | 2 +-
.../pulsar/client/impl/crypto/MessageCryptoBc.java | 11 +-
pulsar-common/build.gradle.kts | 2 +-
.../apache/pulsar/common/tls/DomainType.java} | 10 +-
.../apache/pulsar/common/tls/PublicSuffixList.java | 58 +++
.../pulsar/common/tls/PublicSuffixMatcher.java | 195 ++++++++
...{NoopHostnameVerifier.java => SubjectName.java} | 23 +-
.../pulsar/common/tls/TlsHostnameVerifier.java | 313 ++++++++++++
.../apache/pulsar/common/tls/impl/TlsContexts.java | 4 +-
.../org/apache/pulsar/common/tls/package-info.java | 8 +-
.../common/util/DefaultPulsarSslFactory.java | 373 ++++++++++++++
.../apache/pulsar/common/util/KeyManagerProxy.java | 154 ++++++
.../pulsar/common/util/PulsarSslConfiguration.java | 167 +++++++
.../pulsar/common/util/PulsarSslFactory.java | 106 ++++
.../apache/pulsar/common/util/SecurityUtility.java | 550 +++++++++++++++++++++
.../pulsar/common/util/TrustManagerProxy.java | 123 +++++
.../util/keystoretls/KeyStoreSSLContext.java | 352 +++++++++++++
.../keystoretls/SSLContextValidatorEngine.java | 166 +++++++
.../util/{netty => keystoretls}/package-info.java | 2 +-
.../pulsar/common/util/tls/JcaProviders.java | 10 +-
.../pulsar/common/util/tls/JdkSslContexts.java | 8 +-
.../common/util/DefaultPulsarSslFactoryTest.java | 282 +++++++++++
.../pulsar/common/util/KeyManagerProxyTest.java | 51 ++
.../pulsar/common/util/TrustManagerProxyTest.java | 53 ++
.../pulsar/common/util/netty/SslContextTest.java | 179 +++++++
.../pulsar/common/util/tls/JdkSslContextsTest.java | 10 +-
.../server/ProxyKeyStoreTlsTransportTest.java | 2 +-
.../proxy/server/ProxyKeyStoreTlsWithAuthTest.java | 2 +-
.../server/ProxyKeyStoreTlsWithoutAuthTest.java | 2 +-
.../pulsar/proxy/server/ProxyMutualTlsTest.java | 2 +-
.../proxy/server/ProxyServiceTlsStarterTest.java | 2 +-
.../pulsar/proxy/server/ProxyTlsFactoryTest.java | 2 +-
.../apache/pulsar/proxy/server/ProxyTlsTest.java | 2 +-
.../proxy/server/ProxyWithAuthorizationTest.java | 4 +-
.../server/ProxyWithoutServiceDiscoveryTest.java | 2 +-
.../server/SslContextFallbackSynthesisTest.java | 2 +-
.../ec/jks/key_store_generation.txt | 2 +-
tests/certificate-authority/generate_keystore.sh | 2 +-
41 files changed, 3188 insertions(+), 66 deletions(-)
copy pulsar-common/src/main/java/{io/airlift/compress/zstd/ZStdRawDecompressor.java => org/apache/pulsar/common/tls/DomainType.java} (82%)
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/tls/PublicSuffixList.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/tls/PublicSuffixMatcher.java
copy pulsar-common/src/main/java/org/apache/pulsar/common/tls/{NoopHostnameVerifier.java => SubjectName.java} (69%)
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/tls/TlsHostnameVerifier.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/DefaultPulsarSslFactory.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/KeyManagerProxy.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/PulsarSslConfiguration.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/PulsarSslFactory.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/SecurityUtility.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/TrustManagerProxy.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/keystoretls/KeyStoreSSLContext.java
create mode 100644 pulsar-common/src/main/java/org/apache/pulsar/common/util/keystoretls/SSLContextValidatorEngine.java
copy pulsar-common/src/main/java/org/apache/pulsar/common/util/{netty => keystoretls}/package-info.java (94%)
create mode 100644 pulsar-common/src/test/java/org/apache/pulsar/common/util/DefaultPulsarSslFactoryTest.java
create mode 100644 pulsar-common/src/test/java/org/apache/pulsar/common/util/KeyManagerProxyTest.java
create mode 100644 pulsar-common/src/test/java/org/apache/pulsar/common/util/TrustManagerProxyTest.java
create mode 100644 pulsar-common/src/test/java/org/apache/pulsar/common/util/netty/SslContextTest.java