[CAMEL-14070] netty4-http - Server Name Indication (SNI) Support

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.25.0
• Component/s: camel-netty4-http
• Estimated Complexity: Unknown
• Assignee: Zheng Feng
• Reporter: Göran Erkstam
• Created: 15/Oct/19 11:54
• Updated: 30/Oct/19 04:30
• Resolved: 30/Oct/19 04:30

Description

Implement Server Name Indication (SNI) support for the netty4-http client.

(Has been solved for HttpClient for many years https://issues.apache.org/jira/browse/HTTPCLIENT-1119)

This could be implemented in the HttpClientInitializerFactory.configureClientSSLOnDemand like this:

private SslHandler configureClientSSLOnDemand() throws Exception {
        if (!producer.getConfiguration().isSsl()) {
            return null;
        }        if (producer.getConfiguration().getSslHandler() != null) {
            return producer.getConfiguration().getSslHandler();
        } else if (sslContext != null) {
            URI uri = new URI(nettyProducer.getEndpoint().getEndpointUri());
            SSLEngine sllEngine = sslContext.createSSLEngine(uri.getHost(), uri.getPort());
            sllEngine.setUseClientMode(true);
            SSLParameters sslParameters = sllEngine.getSSLParameters();
            sslParameters.setServerNames(Arrays.asList(new SNIHostName(uri.getHost())));
            sllEngine.setSSLParameters(sslParameters);
            if (producer.getConfiguration().getSslContextParameters() == null) {
                // just set the enabledProtocols if the SslContextParameter doesn't set
                engine.setEnabledProtocols(producer.getConfiguration().getEnabledProtocols().split(","));
            }
            return new SslHandler(engine);
        }        return null;
    }

Issue Links

• links to: GitHub Pull Request #3291
• links to: GitHub Pull Request #3292