Skip to content

Commit

Permalink
[#30] Use "none" mechanism when disabling hostname validation
Browse files Browse the repository at this point in the history
The create_hono_config.sh script has been changed to set the
ssl.endpoint.identification.algorithm Kafka client property to value
"none" instead of "" when disabling hostname validation.

Fixes #30
  • Loading branch information
sophokles73 authored and eriksven committed Dec 8, 2023
1 parent 8330f19 commit 83557d1
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions create-config-hono.sh
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ HONO_KAFKA_SECURE_PORT=9094
HONO_KAFKA_USER="hono"
HONO_KAFKA_PASSWORD="hono-secret"
TRUST_STORE_PATH="/etc/ssl/certs/ca-certificates.crt"
ENABLE_HOSTNAME_VALIDATION="false"
ENABLE_HOSTNAME_VALIDATION="true"
OUT_DIR="."
PROVISION_TO_HONO=""

Expand Down Expand Up @@ -256,7 +256,7 @@ sasl.password=${HONO_KAFKA_PASSWORD}
ssl.ca.location=${TRUST_STORE_PATH}
EOF
if [[ "${ENABLE_HOSTNAME_VALIDATION}" == "false" ]]; then
echo "ssl.endpoint.identification.algorithm=" >> "${KAFKA_PROPERTIES_FILE}"
echo "ssl.endpoint.identification.algorithm=none" >> "${KAFKA_PROPERTIES_FILE}"
fi

# create file with environment variables that the FMS Forwarder running in the vehicle
Expand Down

0 comments on commit 83557d1

Please sign in to comment.