Apache Camel+Quarkus中toD方法调用动态URL的SSL配置问题

问题根源 #

使用to调用静态URL时，自定义的ConfigureSSL是针对单个静态端点实例配置SSL；而toD会动态生成新的端点实例，原配置无法复用，导致SSL信任链验证失败。

可行解决方案 #

方案1：利用Quarkus全局SSL配置（推荐） #

Quarkus集成的Camel HTTP组件会自动复用Quarkus的全局SSL信任配置，无需在Camel路由中单独处理：

1. 将目标服务的证书导入自定义信任库（如my-truststore.jks），放置在src/main/resources目录下
2. 在application.properties中添加以下配置：

quarkus.ssl.trust-store=classpath:my-truststore.jks
quarkus.ssl.trust-store-password=your-store-password
quarkus.ssl.trust-store-type=JKS
# 如果需要双向认证，再添加密钥库配置
# quarkus.ssl.key-store=classpath:my-keystore.jks
# quarkus.ssl.key-store-password=your-key-password

配置完成后，所有Camel的to/toD HTTP端点都会自动使用该信任库，无需修改路由代码。

方案2：全局配置Camel HTTP组件的SSL上下文 #

通过自定义Bean为Camel HTTP组件设置全局SSL参数，所有HTTP端点（包括动态端点）都会继承该配置：

import org.apache.camel.component.http.HttpComponent;
import org.apache.camel.support.jsse.SSLContextParameters;
import org.apache.camel.support.jsse.TrustManagersParameters;
import org.apache.camel.support.jsse.TrustStoreParameters;
import jakarta.enterprise.context.ApplicationScoped;
import jakarta.enterprise.inject.Produces;

@ApplicationScoped
public class GlobalHttpSslConfig {

    @Produces
    public HttpComponent configureHttpComponent() throws Exception {
        HttpComponent httpComponent = new HttpComponent();
        
        // 构建SSL上下文参数，复用你原setupSSLContext中的逻辑
        SSLContextParameters sslParams = new SSLContextParameters();
        
        // 配置信任库
        TrustStoreParameters trustStoreParams = new TrustStoreParameters();
        trustStoreParams.setResource("classpath:my-truststore.jks");
        trustStoreParams.setPassword("your-store-password");
        
        TrustManagersParameters trustManagersParams = new TrustManagersParameters();
        trustManagersParams.setTrustStore(trustStoreParams);
        sslParams.setTrustManagers(trustManagersParams);
        
        // 如果需要双向认证，添加密钥库配置
        // KeyStoreParameters keyStoreParams = new KeyStoreParameters();
        // keyStoreParams.setResource("classpath:my-keystore.jks");
        // keyStoreParams.setPassword("your-key-password");
        // KeyManagersParameters keyManagersParams = new KeyManagersParameters();
        // keyManagersParams.setKeyStore(keyStoreParams);
        // sslParams.setKeyManagers(keyManagersParams);
        
        httpComponent.setSslContextParameters(sslParams);
        return httpComponent;
    }
}

方案3：在toD中显式指定SSL上下文参数 #

适合仅需为特定动态路由配置SSL的场景：

1. 先创建SSLContextParameters的Bean：

import org.apache.camel.support.jsse.SSLContextParameters;
import org.apache.camel.support.jsse.TrustStoreParameters;
import org.apache.camel.support.jsse.TrustManagersParameters;
import jakarta.enterprise.context.ApplicationScoped;
import jakarta.enterprise.inject.Produces;
import jakarta.inject.Named;

@ApplicationScoped
public class RouteSpecificSslConfig {

    @Produces
    @Named("customSslContext")
    @ApplicationScoped
    public SSLContextParameters createCustomSslContext() throws Exception {
        SSLContextParameters sslParams = new SSLContextParameters();
        
        TrustStoreParameters trustStoreParams = new TrustStoreParameters();
        trustStoreParams.setResource("classpath:my-truststore.jks");
        trustStoreParams.setPassword("your-store-password");
        
        TrustManagersParameters trustManagersParams = new TrustManagersParameters();
        trustManagersParams.setTrustStore(trustStoreParams);
        sslParams.setTrustManagers(trustManagersParams);
        
        return sslParams;
    }
}

2. 在路由的toD中引用该SSL参数：

from("direct:invokeDynamicService")
    .toD("https://localhost:8080/users/${header.user}/customers?sslContextParameters=#customSslContext");

内容的提问来源于stack exchange，提问作者Cesar Justo