Skip to content

Conversation

@shibd
Copy link
Member

@shibd shibd commented Nov 27, 2025

Motivation

Support separate TLS handshake certificate and private key parameters independent from auth, enabling proper mTLS handshake configuration on the client.

Modifications

  • Add tlsCertificateFilePath and tlsPrivateKeyFilePath to ClientConfig.
  • Pass them to the C client via pulsar_client_configuration_set_tls_certificate_file_path and pulsar_client_configuration_set_tls_private_key_file_path.
  • Update end_to_end test to provide client cert/key for TLS endpoints under mTLS.

Verifying this change

  • Added and ran targeted tests for Produce/Consume to pulsar+ssl:// and https:// endpoints; tests pass when providing client cert/key.

Documentation

  • doc-not-needed (API is discoverable via type definitions and examples).

### Motivation
Support separate TLS handshake certificate/private key parameters independent from auth, enabling proper mTLS handshake configuration.

### Modifications
- Add  and  to .
- Wire to C client via  and .
- Update end-to-end test to provide client cert/key for TLS endpoints.

### Verifying this change
- Ran  only for  cases; TLS endpoints pass with client cert/key.

### Documentation
- [x] doc-not-needed (Type hints updated in ).
@shibd shibd merged commit 772ab49 into apache:master Nov 27, 2025
23 of 24 checks passed
@shibd shibd added this to the 1.16.0 milestone Dec 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants