You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "oscerd (via GitHub)" <gi...@apache.org> on 2026/06/11 11:01:16 UTC
[PR] CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for TLS configuration [camel]
oscerd opened a new pull request, #23952:
URL: https://github.com/apache/camel/pull/23952
# CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for TLS configuration
## What
Adds `SSLContextParameters` support to `camel-elasticsearch` so users can configure fine-grained TLS settings — named groups, signature schemes, cipher suites and protocols — instead of relying solely on the CA-only `certificatePath` option. This enables, for example, post-quantum named groups such as `X25519MLKEM768` on JDK 25+.
Previously `ElasticsearchProducer` created the `SSLContext` directly via `SSLContext.getInstance("TLSv1.3")` from a CA certificate, with no hook for `SSLContextParameters`.
## Changes
- `ElasticsearchComponent` now implements `SSLContextParametersAware`, exposing `sslContextParameters` and `useGlobalSslContextParameters` (with global fallback wiring in `createEndpoint`).
- `ElasticsearchConfiguration` gains an `sslContextParameters` URI parameter (`security` group).
- `ElasticsearchProducer` builds the `SSLContext` from `SSLContextParameters` when configured; the existing `certificatePath` (self-signed CA) path is retained as a fallback.
- The HTTP client config callback is now applied independently of basic-auth credentials, so TLS configuration is honored regardless of whether credentials are set (previously `certificatePath` was silently ignored when no `user`/`password` was configured).
- Regenerated catalog + component/endpoint DSL metadata.
## Precedence
Explicit `sslContextParameters` › global SSL context parameters (when `useGlobalSslContextParameters=true`) › `certificatePath` (CA-only).
## Tests
New `ElasticsearchSslContextParametersTest` covers: configuration round-trip, component→endpoint propagation, use of global parameters, and explicit-wins-over-global. Existing camel-elasticsearch unit tests pass; full reactor build (`mvn clean install -DskipTests`) is green.
## Notes
Mirrors CAMEL-23314 (camel-opensearch). No new dependencies; no public API changes beyond the additive component/endpoint options.
🤖 Generated with [Claude Code](https://claude.com/claude-code) on behalf of Andrea Cosentino
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for TLS configuration [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #23952:
URL: https://github.com/apache/camel/pull/23952#issuecomment-4679847433
:star2: Thank you for your contribution to the Apache Camel project! :star2:
:robot: CI automation will test this PR automatically.
:camel: Apache Camel Committers, please review the following items:
* First-time contributors **require MANUAL approval** for the GitHub Actions to run
* You can use the command `/component-test (camel-)component-name1 (camel-)component-name2..` to request a test from the test bot although they are normally detected and executed by CI.
* You can label PRs using `skip-tests` and `test-dependents` to fine-tune the checks executed by this PR.
* Build and test logs are available in the summary page. **Only** [Apache Camel committers](https://camel.apache.org/community/team/#committers) have access to the summary.
:warning: Be careful when sharing logs. Review their contents before sharing them publicly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for TLS configuration [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #23952:
URL: https://github.com/apache/camel/pull/23952#issuecomment-4680534610
<!-- ci-tested-modules -->
:test_tube: **CI tested the following changed modules:**
- `catalog/camel-catalog`
- `components/camel-elasticsearch`
- `dsl/camel-componentdsl`
- `dsl/camel-endpointdsl`
<details><summary>All tested modules (11 modules)</summary>
- Camel :: Catalog :: Camel Catalog
- Camel :: Component DSL
- Camel :: ElasticSearch Java API Client
- Camel :: Endpoint DSL
- Camel :: JBang :: MCP
- Camel :: JBang :: Plugin :: Route Parser
- Camel :: JBang :: Plugin :: TUI
- Camel :: JBang :: Plugin :: Validate
- Camel :: Launcher :: Container
- Camel :: YAML DSL :: Validator
- Camel :: YAML DSL :: Validator Maven Plugin
</details>
---
:gear: [View full build and test results](https://github.com/apache/camel/actions/runs/27342206873)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for TLS configuration [camel]
Posted by "oscerd (via GitHub)" <gi...@apache.org>.
oscerd merged PR #23952:
URL: https://github.com/apache/camel/pull/23952
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org