Uploaded image for project: 'MariaDB Connector/R2DBC'
  1. MariaDB Connector/R2DBC
  2. R2DBC-119

fail closed when a classpath SSL certificate is missing

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • None
    • 1.4.1
    • other
    • None

    Description

      ClassLoader.getResourceAsStream returns null (not an exception) for a missing
      classpath: resource, so a missing serverSslCert=classpath:... was passed to
      Netty as a null trust manager, which silently uses the JDK system trust store
      and defeats certificate pinning, regardless of fallbackToSystemTrustStore.

      Attachments

        Activity

          People

            diego dupin Diego Dupin
            diego dupin Diego Dupin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.