Skip to content

Fix TLS configuration for WebClient Eureka transport - #4601

Closed
yashdotdev13 wants to merge 19 commits into
spring-cloud:5.0.xfrom
yashdotdev13:issue-3793-cert-authentication
Closed

yashdotdev13 wants to merge 19 commits into
spring-cloud:5.0.xfrom
yashdotdev13:issue-3793-cert-authentication

Conversation

@yashdotdev13

Copy link
Copy Markdown
Contributor

Description

The WebClient Eureka transport currently ignores the SSLContext provided by the Eureka client transport configuration.

This prevents WebClient from using the configured TLS credentials when connecting to an Eureka server that requires client certificate authentication.

This change:

  • propagates the configured SSLContext to WebClientTransportClientFactory
  • configures Reactor Netty to use the provided SSL context
  • adds WebClient TLS integration coverage to the Eureka client TLS test suite

Testing

  • ./mvnw -pl spring-cloud-netflix-eureka-client -am -DskipTests compile
  • ./mvnw -pl spring-cloud-netflix-eureka-client-tls-tests "-Dtest=WebClientEurekaClientTests" test

All 5 WebClient TLS tests pass.

Fixes #3793

yashdotdev13 and others added 19 commits August 29, 2026 01:21
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>
…-health-contributor-status

Log health contributor statuses when Eureka health status changes
Bumps [antora](https://gitlab.com/antora/antora/tree/HEAD/packages/antora) from 3.2.0-rc.3 to 3.2.0.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc)
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.3...v3.2.0)

---
updated-dependencies:
- dependency-name: antora
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>
…line

Use DiscoveryClient TLS settings for RestClient transport
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>
…ka-virtual-hostname

Document Eureka virtual hostname discovery.  Fixes spring-cloud#1424
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>
…ve-eureka-server-setup

Improve Eureka Server documentation
Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>

@ryanjbaxter ryanjbaxter left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you submit this against the 5.0.x branch?

Comment thread spring-cloud-netflix-eureka-client-tls-tests/pom.xml
@yashdotdev13
yashdotdev13 changed the base branch from main to 5.0.x September 15, 2026 19:43
@yashdotdev13

Copy link
Copy Markdown
Contributor Author

Superseded by #4603, which is based on the 5.0.x branch as requested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support cert based authentication for eureka server

4 participants