apache / apache/pulsar-client-cpp
Enable tls hostname verification in c++ client it is failing but works with java client
- 主要语言
- C++
- 星标
- 71
- 派生
- 90
- 平均合并
- 2 小时 33 分钟
- 30 天内合并 PR
- 3
描述
### Search before asking
- [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.
### Version
2.8.2
### Minimal reproduce step
Client CN: [myd-hvmxxxx.swinfra.net](http://myd-hvmxxxx.swinfra.net/)
Url of proxy :pulsar+ssl://myd-hvmxxxx.swinfra.net:31051
Below is the error we are seeing in c++ client:
UDX-2.9.0-5:ERROR:ClientConnection(456)[10.199.82.99:43104 -> 10.199.81.77:31051] Handshake failed: certificate verify failedSun Dec 25 01:07:54 2022
UDX-2.9.0-5:ERROR:ClientImpl(43
[Uploading Downloads.zip…]()
2)Error getting topic partitions metadata: ConnectError
attaching the files for reproducing .
### What did you expect to see?
connection from cpp client to work when tls hostname is enabled .
### What did you see instead?
connection errors .
### Anything else?
_No response_
### Are you willing to submit a PR?
- [X] I'm willing to submit a PR!
贡献指南
调研方向
首先,使用代理 URL 和附带的复现文件,复现针对版本 2.8.2 描述的 TLS 主机名验证失败问题。将 C++ 客户端的行为与正常工作的 Java 客户端进行比较,并验证启用主机名验证后连接能够成功。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- cpp
- 领域
- networking, security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 25/100