oscerd opened a new pull request, #23952:
URL: https://github.com/apache/camel/pull/23952
# CAMEL-23444: camel-elasticsearch - Add SSLContextParameters support for
TLS configuration
## What
Adds `SSLContextParameters` support to `camel-elasticsearch` so users can
configure fine-grained TLS settings — named groups, signature schemes, cipher
suites and protocols — instead of relying solely on the CA-only
`certificatePath` option. This enables, for example, post-quantum named groups
such as `X25519MLKEM768` on JDK 25+.
Previously `ElasticsearchProducer` created the `SSLContext` directly via
`SSLContext.getInstance("TLSv1.3")` from a CA certificate, with no hook for
`SSLContextParameters`.
## Changes
- `ElasticsearchComponent` now implements `SSLContextParametersAware`,
exposing `sslContextParameters` and `useGlobalSslContextParameters` (with
global fallback wiring in `createEndpoint`).
- `ElasticsearchConfiguration` gains an `sslContextParameters` URI parameter
(`security` group).
- `ElasticsearchProducer` builds the `SSLContext` from
`SSLContextParameters` when configured; the existing `certificatePath`
(self-signed CA) path is retained as a fallback.
- The HTTP client config callback is now applied independently of basic-auth
credentials, so TLS configuration is honored regardless of whether credentials
are set (previously `certificatePath` was silently ignored when no
`user`/`password` was configured).
- Regenerated catalog + component/endpoint DSL metadata.
## Precedence
Explicit `sslContextParameters` › global SSL context parameters (when
`useGlobalSslContextParameters=true`) › `certificatePath` (CA-only).
## Tests
New `ElasticsearchSslContextParametersTest` covers: configuration
round-trip, component→endpoint propagation, use of global parameters, and
explicit-wins-over-global. Existing camel-elasticsearch unit tests pass; full
reactor build (`mvn clean install -DskipTests`) is green.
## Notes
Mirrors CAMEL-23314 (camel-opensearch). No new dependencies; no public API
changes beyond the additive component/endpoint options.
🤖 Generated with [Claude Code](https://claude.com/claude-code) on behalf of
Andrea Cosentino
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
