[I] [TLS] Wire TLS encryption into the client Netty pipeline [fluss]

["affo (via GitHub)" <gi...@apache.org>]

affo opened a new issue, #3797:
URL: https://github.com/apache/fluss/issues/3797

   ### Search before asking
   
   - [x] I searched in the [issues](https://github.com/apache/fluss/issues) and found nothing similar.
   
   ### Description
   
   Part of #3786 ([FIP-29: (m)TLS Support](https://cwiki.apache.org/confluence/spaces/FLUSS/pages/406620533/FIP-29+m+TLS+Support)).
   
   **Wave 2** — depends on: SSL config & context foundations (#3796), server pipeline integration (#3792).
   
   - `NettyClient` — builds a client `SslContext` once when `client.security.ssl.enabled=true`.
   - `ServerConnection.establishConnection` — adds `SslHandler` at the pipeline head, configures hostname verification (`client.security.ssl.endpoint.identification.algorithm`, default `https`) using the target host/port.
   - `TlsDataPathITCase` — end-to-end client↔server data-path test (append/scan) over TLS, verifying the zero-copy fallback path from #3792.
   
   **Depends on:** SSL config & context foundations (#3796), server pipeline integration (#3792).
   
   _Estimated diff size: ~330 lines._
   
   ### Willingness to contribute
   
   - [x] I'm willing to submit a PR!
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org