ZOOKEEPER-5070: Support Single EKU certificates - #2429

Merged

anmolnar merged 7 commits into

apache:masterfrom

PDavid:ZOOKEEPER-5070-single-eku

Sep 11, 2026

Commits on Sep 10, 2026

ZOOKEEPER-5070: Support Single EKU certificates
PDavid
committed
b964592
ZOOKEEPER-5070: Use two SSLContexts for FIPS-compatible single-EKU support

PDavid
and
claude
committed
582c7ea
ZOOKEEPER-5070. Fix X509AuthenticationProvider for client mTLS and add unit test (#2)

anmolnar
authored and
PDavid
committed
5227850
ZOOKEEPER-5070: Fix typo in log message in buildServerTrustManager
PDavid
committed
8f1f771
ZOOKEEPER-5070: Fixed loading key/truststores twice when no separate client/server stores
PDavid
committed
a8a7a4c
ZOOKEEPER-5070: Fixed testSeparateClientKeyStore_singleEkuCertsHandshake cleanup
PDavid
committed
87619d0
ZOOKEEPER-5070: Documented single EKU support and new config properties

PDavid
and
claude
committed
8d39444