[jira] [Updated] (CAMEL-25105) camel-netty - The client authentication of sslContextParameters is overridden by needClientAuth=false

["Claus Ibsen (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-25105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Claus Ibsen updated CAMEL-25105:
--------------------------------
    Fix Version/s: 4.23.0

> camel-netty - The client authentication of sslContextParameters is overridden by needClientAuth=false
> -----------------------------------------------------------------------------------------------------
>
>                 Key: CAMEL-25105
>                 URL: https://issues.apache.org/jira/browse/CAMEL-25105
>             Project: Camel
>          Issue Type: Bug
>          Components: camel-netty, camel-netty-http
>            Reporter: Claus Ibsen
>            Assignee: Claus Ibsen
>            Priority: Major
>             Fix For: 4.23.0
>
>
> A camel-netty (and camel-netty-http) consumer using {{sslContextParameters}} does not use the client authentication configured in the server parameters of the sslContextParameters ({{SSLContextServerParameters.clientAuthentication}}, or {{camel.ssl.clientAuthentication}} with global SSL).
> The SSLEngine created from the sslContextParameters is configured with the client authentication (such as REQUIRE), but afterwards the consumer calls {{engine.setNeedClientAuth(needClientAuth)}} with the endpoint option, which is false by default, so the client authentication is turned off (also WANT).
> Affected: DefaultServerInitializerFactory (camel-netty), HttpServerInitializerFactory and HttpServerSharedInitializerFactory (camel-netty-http).
> The fix only sets need client authentication when the needClientAuth option is enabled.
> _Claude Code on behalf of Claus Ibsen_



--
This message was sent by Atlassian Jira
(v8.20.10#820010)