Skip to content

DSP-25338 TAAS upload Test PR. (Do not MERGE) - #44

Open
piyushk010 wants to merge 8 commits into
dse-netty-4.1.137.1.dsefrom
dse-netty-4.1.137.2.dse
Open

piyushk010 wants to merge 8 commits into
dse-netty-4.1.137.1.dsefrom
dse-netty-4.1.137.2.dse

Conversation

@piyushk010

Copy link
Copy Markdown

No description provided.

Enable SAN-aware peer identity lookup for Netty client endpoint verification based
on hostname.

Added a new opt-in SAN-aware peer identity feature via `SAN_PEER_IDENTITY_LOOKUP`
in Netty SSL context configuration. Implemented `SanPeerIdentityTrustManager` to
dynamically select the verification identity based on certificate SAN types,
including optional reverse-DNS lookup for IP-based peers with DNS SAN certs.

Integrated the feature into both JDK and OpenSSL client TLS paths by wrapping
`X509ExtendedTrustManager` during SSL context/session creation. Updated
`SslContextBuilder`, `OpenSslClientContext`, `ReferenceCountedOpenSslClientContext`,
and `JdkSslClientContext` so the SAN-aware verification behavior is propagated
consistently across providers.
@piyushk010
piyushk010 force-pushed the dse-netty-4.1.137.2.dse branch from dcc9ea7 to 1557581 Compare October 21, 2026 00:20
@piyushk010
piyushk010 force-pushed the dse-netty-4.1.137.2.dse branch 3 times, most recently from f60d8f7 to db18457 Compare October 21, 2026 08:16
@piyushk010
piyushk010 force-pushed the dse-netty-4.1.137.2.dse branch 2 times, most recently from 2189aa7 to a8a6837 Compare November 9, 2026 17:20
…tall, -nsu in all stages including netty-all (locally verified)
@piyushk010
piyushk010 force-pushed the dse-netty-4.1.137.2.dse branch from a8a6837 to 5d2b63f Compare November 10, 2026 15:04
@tiagomlalves tiagomlalves changed the title TAAS upload Test PR. (Do not MERGE) DSP-24887 TAAS upload Test PR. (Do not MERGE) Nov 12, 2026
@tiagomlalves tiagomlalves changed the title DSP-24887 TAAS upload Test PR. (Do not MERGE) DSP-25338 TAAS upload Test PR. (Do not MERGE) Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant