jamesnetherton opened a new pull request, #557: URL: https://github.com/apache/camel-quarkus-examples/pull/557
The manual testing command in `README.adoc` passed `-k`, which disables exactly the certificate and hostname verification this example exists to demonstrate. A reader following a TLS tutorial should not be shown how to turn verification off. - `README.adoc`: use `--cacert target/certs/server-cert.pem` instead of `-k`. Also corrects the sample response body, which showed a JSON payload the route does not produce. - `CertificateGenerator`: add subject alternative names (`DNS:localhost`, `IP:127.0.0.1`) to the server certificate, and write it out as `server-cert.pem` so that curl has a CA file to trust. Without a SAN the certificate only verifies via OpenSSL's legacy CN fallback. - `AbstractPqcTest`: stop disabling hostname verification in the RestAssured and HttpClient 5 clients, so the tests fail if the SAN regresses. Verified by running the packaged application and issuing the documented curl command: it succeeds, and fails with `SSL certificate problem: self signed certificate` if `--cacert` is omitted. Note on native mode: `mvn clean verify -Dnative` does not complete on my machine, failing in `native-image` with an `UnsatisfiedLinkError` in `io.netty.internal.tcnative.SSLPrivateKeyMethod`. This reproduces identically on an unmodified `camel-quarkus-main`, so it is pre-existing and environment specific rather than caused by this change, but it does mean the native path here is unverified by me. 🤖 Generated with [Claude Code](https://claude.com/claude-code) _Claude Code on behalf of James Netherton_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
