[jira] [Resolved] (CAMEL-24999) camel-hivemq: ssl option is missing security=insecure:ssl annotation for the security policy framework

["Claus Ibsen (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-24999?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Claus Ibsen resolved CAMEL-24999.
---------------------------------
    Resolution: Fixed

Fixed by https://github.com/apache/camel/pull/26891 (merged to main, 4.23.0).

_Claude Code on behalf of davsclaus_

> camel-hivemq: ssl option is missing security=insecure:ssl annotation for the security policy framework
> ------------------------------------------------------------------------------------------------------
>
>                 Key: CAMEL-24999
>                 URL: https://issues.apache.org/jira/browse/CAMEL-24999
>             Project: Camel
>          Issue Type: Improvement
>            Reporter: Andrea Cosentino
>            Assignee: Andrea Cosentino
>            Priority: Minor
>             Fix For: 4.23.0
>
>
> The ssl option in HiveMQConfiguration controls whether TLS is used for the MQTT broker connection. It defaults to false (plaintext). The @UriParam annotation does not have the security = "insecure:ssl" attribute set, so the Camel security policy framework (under the prod profile) cannot detect or warn about a deployment running without TLS.
> Sibling components annotate their equivalent options correctly (e.g. camel-pinecone disableTls, PineconeVectorDbConfiguration line 62).
> The fix is a one-line annotation change in HiveMQConfiguration:
>   @UriParam(defaultValue = "false", label = "security", security = "insecure:ssl", insecureValue = "false")
>   private boolean ssl;
> Affected file:
> - components/camel-hivemq/src/main/java/org/apache/camel/component/hivemq/HiveMQConfiguration.java



--
This message was sent by Atlassian Jira
(v8.20.10#820010)