From 2abe872e37bf4da69d72c8d2cb3bdd8c7eadf674 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 11 Aug 2026 07:55:06 +0200 Subject: [PATCH] Fix hostname verification failure in Elasticsearc smoke test Regenerate the self-signed test certificate with CN=localhost as the JDK enforces RFC 6125 wildcard rules and no longer accepts a bare "*" as a match-any-host pattern. Thus far it worked because HttpClient5 did not delegate hostname verification to the JDK in some cases. Closes gh-51345 --- .../src/dockerTest/resources/ssl.crt | 32 ++++++++++--------- 1 file changed, 17 insertions(+), 15 deletions(-) diff --git a/smoke-test/spring-boot-smoke-test-data-elasticsearch/src/dockerTest/resources/ssl.crt b/smoke-test/spring-boot-smoke-test-data-elasticsearch/src/dockerTest/resources/ssl.crt index a45ed17cf7b..226f0d07497 100644 --- a/smoke-test/spring-boot-smoke-test-data-elasticsearch/src/dockerTest/resources/ssl.crt +++ b/smoke-test/spring-boot-smoke-test-data-elasticsearch/src/dockerTest/resources/ssl.crt @@ -1,17 +1,19 @@ -----BEGIN CERTIFICATE----- -MIICpjCCAY6gAwIBAgIUd1pIGeth3t+uXRwJqQgBkX6RqVwwDQYJKoZIhvcNAQEL -BQAwDDEKMAgGA1UEAwwBKjAgFw0yNDA4MjMwOTI5MjBaGA8yMTI0MDgyMzA5Mjky -MFowDDEKMAgGA1UEAwwBKjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB -AMvuy3afu6umnCgEBElfgboa2M1O7RWwuvA0OIWdEzxYYQmc9QUihd2l68pIu9jT -hR+2CENL4iY2HNtELJ8kFSGgUGPGrsjLj/qqULG1/r2f18tPavMD7Hxo0AGA+yyX -nECCfHGPJ7P88fWwoMfdp8Y4s/BW7QcC7vB9kQGjUOb4V/WUWI7c27Yxj6/nCPRr -Gkb5YkEvsw6TPeBfZbx7kjWaYtd8eKjVHf40lu0AhXGK+lFuaLrY9VYBYoiMRtIZ -3/EKf2gKQiIIR7tN3DUa5zi6vYvQNaUaK14yomfyynUzGPbIcMq8V+c6j3gI7jqf -ITqaaBn5NIM0W7ox6hhr+UUCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEApgal5rth -5y94hnwgNt0/+PuVj5vwxUIi0WgV6b1GE+3033h+l57hKcIRem4l3xEQnAs3NyLK -BnbBgnnUfSOgPZhiP8s3VHSvGeJda7z2IQhCBe+cUnx6UHs8wgN4Nh1rkbEUzBvZ -xm98B/bcbTsiSnIRTHBvIYhySDuCmyYOZwH8HC6rct6U3PODmJ6OjtWC43kjO0jT -4/T/1PBJnVnN0r1Xu/P+GNDgDnzifIYr5ofY0zGsOC1GhRWyqbiIfe5hgZ//q81U -1tFbSlLNvoi3C4jf2Fj9lYo8Ylkxk7QE5dFbRmBDffCo2sD8g6wyZN3PhaIyckG5 -E0uZHTBFFpFKjQ== +MIIDJzCCAg+gAwIBAgIUcov5N2+Jbn1fg4UYQF0PulAhfJwwDQYJKoZIhvcNAQEL +BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MCAXDTI2MDgxMTA1NTIzMloYDzIxMjYw +NzE4MDU1MjMyWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQDL7st2n7urppwoBARJX4G6GtjNTu0VsLrwNDiFnRM8 +WGEJnPUFIoXdpevKSLvY04UftghDS+ImNhzbRCyfJBUhoFBjxq7Iy4/6qlCxtf69 +n9fLT2rzA+x8aNABgPssl5xAgnxxjyez/PH1sKDH3afGOLPwVu0HAu7wfZEBo1Dm ++Ff1lFiO3Nu2MY+v5wj0axpG+WJBL7MOkz3gX2W8e5I1mmLXfHio1R3+NJbtAIVx +ivpRbmi62PVWAWKIjEbSGd/xCn9oCkIiCEe7Tdw1Guc4ur2L0DWlGiteMqJn8sp1 +Mxj2yHDKvFfnOo94CO46nyE6mmgZ+TSDNFu6MeoYa/lFAgMBAAGjbzBtMB0GA1Ud +DgQWBBSRo92b9sMAAjMuytDUVN5QaxgvjjAfBgNVHSMEGDAWgBSRo92b9sMAAjMu +ytDUVN5QaxgvjjAPBgNVHRMBAf8EBTADAQH/MBoGA1UdEQQTMBGCCWxvY2FsaG9z +dIcEfwAAATANBgkqhkiG9w0BAQsFAAOCAQEAYl3KNG2O6jMkE/Eva34Nz2w0ILwV +hQOue5/ZLzr486Wje1mZycR+SkiiWgLHngRi5i/JDGLWo+yvkzkLvfw/NBpM5zU6 +LMjyV1GqX01YjZv8Tq+V/zBwv+R7zDXy4EAbwv1EECivFXSQONRmDNPDbBtnKvJ4 +CGaSnN2qUOUR3hoVmue/yzE/QqPfUpOH4oZrp2PN44zItqGRuUujEsZph/YxKwKm +360cz++pQH9dGfyYf07TXInwlWN287xRW7EBZhAWEVPTCVLhar5vg7AeDOckmOHT +PdYbFoqJz2brflJt99v6OcZXo1rwNvM2BykAMWXjHcCTv5NxzFkclxgeZg== -----END CERTIFICATE-----