[CAMEL-19022] Camel-blueprint sslContextParameters and camel-ldap and camel-http(s) - no custom trust is loaded

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Information Provided
• Affects Version/s: 3.20.0, 3.20.1, 3.20.2
• Component/s: camel-blueprint, camel-http, camel-ldap

Environment

Camel 3.20.2 

Karaf 4.4.3

OpenJDK 17

RedHat Linux 9

• Estimated Complexity: Unknown
• Assignee: Grzegorz Grzybek
• Reporter: Tapio Piironen
• Created: 08/Feb/23 09:23
• Updated: 17/Sep/23 15:06
• Resolved: 08/Feb/23 09:55

Description

1) camel-ldap problem:

In blueprint style camel config trust is not loaded after 3.20 camel. 3.18.5 still loads custom trust.

Followed instructions in https://camel.apache.org/components/3.20.x/ldap-component.html

Blueprint that fails to load trust is following:

<sslContextParameters xmlns="http://camel.apache.org/schema/blueprint" id="sslContextParameters"> <keyManagers keyPassword="keystore.pwd"> <keyStore resource="keystore.url" password="keystore.pwd"/> </keyManagers> </sslContextParameters> <bean id="customSocketFactory" class="zotix.co.util.CustomSocketFactory"> <argument ref="sslContextParameters" /> </bean>

CustomSocketFactory the same as in ldap-component documentation. Documentation loads keyManager as trustManager (which might be better to be fixed in documentation but anyways).

 

2) camel-http(s) problem is about client certificate insertion . There sslContextParameters are included in sslcontextparams and camel-https call like:

 <sslContextParameters
            id="sslContextParameters">
        <keyManagers
                keyPassword="pwd">
            <keyStore
                    resource="jks.location"
                    password="password"/>
        </keyManagers>
        <serverParameters
                clientAuthentication="WANT"/>
        <clientParameters>
            <cipherSuitesFilter>
                <camel:include>.*</camel:include>
            </cipherSuitesFilter>
        </clientParameters>
    </sslContextParameters>

and the final call via:

<to uri="https://server?httpClient.connectionRequestTimeout=10000&httpClient.socketTimeout=30000&sslContextParameters=#sslContextParameters"/>

in this case we get denial from server as handshake_failure .

 

Is configuring changed in 3.20 or is this a bug?

Issue Links

• is duplicated by: CAMEL-19858 Truststore can't be found with sslContextParameters