You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 1, 2024. It is now read-only.
The behavior was introduced in the PR apache#15824 since the async-http-client doesn't split the flag for SNI header and hostname verification. @michaeljmarshall
To Reproduce
Set tlsEnableHostnameVerification to false in the client.conf, and use pulsar-admin to operate a pulsar cluster behind the istio gateway.
Expected behavior
The pulsar-admin should set the SNI header properly.
Screenshots
N/A
Desktop (please complete the following information):
OS: MAC OS X
Additional context
The text was updated successfully, but these errors were encountered:
Original Issue: apache#16416
Describe the bug
The async-http-client used in pulsar-admin doesn't set SNI properly when
tlsEnableHostnameVerification
isfalse
, see https://github.com/AsyncHttpClient/async-http-client/blob/master/client/src/main/java/org/asynchttpclient/netty/ssl/DefaultSslEngineFactory.java#L65. This will fail https requests that rely on SNI routing, like a pulsar cluster deployed behind an istio gateway.The behavior was introduced in the PR apache#15824 since the async-http-client doesn't split the flag for SNI header and hostname verification. @michaeljmarshall
To Reproduce
Set
tlsEnableHostnameVerification
tofalse
in theclient.conf
, and use pulsar-admin to operate a pulsar cluster behind the istio gateway.Expected behavior
The pulsar-admin should set the SNI header properly.
Screenshots
N/A
Desktop (please complete the following information):
Additional context
The text was updated successfully, but these errors were encountered: