apache / apache/pulsar-client-cpp

Enable tls hostname verification in c++ client it is failing but works with java client

Aperta
#174 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
C++
Stelle
71
Fork
90
Merge medio
2h 33m
PR unite (30g)
3

Descrizione

### Search before asking

- [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.

### Version

2.8.2

### Minimal reproduce step

Client CN: [myd-hvmxxxx.swinfra.net](http://myd-hvmxxxx.swinfra.net/)
Url of proxy :pulsar+ssl://myd-hvmxxxx.swinfra.net:31051
Below is the error we are seeing in c++ client:
UDX-2.9.0-5:ERROR:ClientConnection(456)[10.199.82.99:43104 -> 10.199.81.77:31051] Handshake failed: certificate verify failedSun Dec 25 01:07:54 2022
UDX-2.9.0-5:ERROR:ClientImpl(43
[Uploading Downloads.zip…]()
2)Error getting topic partitions metadata: ConnectError

attaching the files for reproducing .

### What did you expect to see?

connection from cpp client to work when tls hostname is enabled .

### What did you see instead?

connection errors .

### Anything else?

_No response_

### Are you willing to submit a PR?

- [X] I'm willing to submit a PR!

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Start by reproducing the TLS hostname-verification failure described for version 2.8.2, using the proxy URL and attached reproduction files. Compare the C++ client's behavior with the working Java client and verify the connection succeeds when hostname verification is enabled.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
cpp
Ambito
networking, security
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Ferma
Chiarezza
Abbastanza chiara
Idoneità per principianti
25/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.