Skip to content

Add insecure TLS option to mqtt test#710

Open
schmitz-chris wants to merge 2 commits into
masterfrom
pi-loop/2026-04-29-mqtt-cli-test-insecure-tls-001
Open

Add insecure TLS option to mqtt test#710
schmitz-chris wants to merge 2 commits into
masterfrom
pi-loop/2026-04-29-mqtt-cli-test-insecure-tls-001

Conversation

@schmitz-chris
Copy link
Copy Markdown

Summary

Adds --insecure to mqtt test so users can deliberately run TLS broker tests while ignoring certificate/trust validation failures.

Details

  • Exposes --insecure only on TestBrokerCommand
  • Wires the flag into TlsOptions through a programmatic toggle, so publish/subscribe/shell TLS options are not broadened
  • Uses a trust-all TrustManagerFactory plus hostname verifier only when insecure mode is explicitly enabled
  • Keeps normal --secure behavior on the default trust and hostname validation path
  • Documents the new option in the test command docs

Validation

  • ./gradlew compileJava
  • ./gradlew test --tests '*TestBrokerCommand*' --tests '*TlsOptions*'
  • ./gradlew test

Pi Loop reviewer: Claude Sonnet 4.6 promoted the iteration with zero findings.

@cla-bot cla-bot Bot added the cla-signed label Apr 29, 2026
@schmitz-chris schmitz-chris marked this pull request as ready for review April 29, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant