[jira] [Resolved] (CAMEL-24653) SSLCertTrustTest: replace external badssl.com dependency with local self-signed HTTPS endpoint

["Guillaume Nodet (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-24653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Guillaume Nodet resolved CAMEL-24653.
-------------------------------------
    Resolution: Fixed

> SSLCertTrustTest: replace external badssl.com dependency with local self-signed HTTPS endpoint
> ----------------------------------------------------------------------------------------------
>
>                 Key: CAMEL-24653
>                 URL: https://issues.apache.org/jira/browse/CAMEL-24653
>             Project: Camel
>          Issue Type: Improvement
>          Components: camel-oauth
>            Reporter: Guillaume Nodet
>            Assignee: Guillaume Nodet
>            Priority: Minor
>
> The SSLCertTrustTest.testUntrustedCertificate test connects to https://untrusted-root.badssl.com to verify that an SSLHandshakeException is thrown for untrusted certificates. This relies on an external resource that may be unreachable in CI environments (network restrictions, DNS issues), causing flaky failures.
> Replace the external dependency with a local HTTPS endpoint using a self-signed certificate whose CA is not in the trust store. This can be done with a lightweight embedded server (e.g. Jetty or raw SSLServerSocket) started in a @BeforeAll / @RegisterExtension, using a programmatically generated self-signed cert.
> This eliminates the external network dependency while preserving the same test semantics (SSLHandshakeException on untrusted cert).
> Related: CAMEL-24599 (flaky test report for the same test)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)