Files
Aashish Kumar 8eaecd6950 MINOR: keep empty SSL principal names and add upgrade note (#24019)
#24010 also started treating a rule that produces an empty name as not
matching. That changes the principal for common rules: for example, with
RULE:^.*[Cc][Nn]=([a-zA-Z0-9.]*).*$/$1/L from the docs, a certificate
with
CN=_svc used to map to an empty name and now maps to the next rule (or
fails authentication without DEFAULT). Revert that part so these rules
behave as before.

Add a 4.5.0 upgrade note for the change in how rules that are not
anchored with both ^ and $, or that use alternation, build the principal
name.

Reviewers: Manikumar Reddy <manikumar@confluent.io>
2026-10-30 10:16:18 +05:30
..