apache / apache/pulsar-client-cpp

Enable tls hostname verification in c++ client it is failing but works with java client

Open
#174 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
71
Forks
90
Avg merge
2h 33m
Merged PRs (30d)
3

Description

### Search before asking

- [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.

### Version

2.8.2

### Minimal reproduce step

Client CN: [myd-hvmxxxx.swinfra.net](http://myd-hvmxxxx.swinfra.net/)
Url of proxy :pulsar+ssl://myd-hvmxxxx.swinfra.net:31051
Below is the error we are seeing in c++ client:
UDX-2.9.0-5:ERROR:ClientConnection(456)[10.199.82.99:43104 -> 10.199.81.77:31051] Handshake failed: certificate verify failedSun Dec 25 01:07:54 2022
UDX-2.9.0-5:ERROR:ClientImpl(43
[Uploading Downloads.zip…]()
2)Error getting topic partitions metadata: ConnectError

attaching the files for reproducing .

### What did you expect to see?

connection from cpp client to work when tls hostname is enabled .

### What did you see instead?

connection errors .

### Anything else?

_No response_

### Are you willing to submit a PR?

- [X] I'm willing to submit a PR!

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the TLS hostname-verification failure described for version 2.8.2, using the proxy URL and attached reproduction files. Compare the C++ client's behavior with the working Java client and verify the connection succeeds when hostname verification is enabled.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.