pulsar

<@U078Y59KC3B> Failed to get tls certificates from client in pulsar proxy

The error "Failed to get TLS certificates from client" in Pulsar proxy typically means the client did not provide a valid certificate during mutual TLS (mTLS) authentication. This is enforced when `tlsRequireTrustedClientCertOnConnect` is set to `true` and the proxy or broker expects a client certificate for authentication. The Common Name (CN) in the client certificate is used as the client's role token. If the certificate is missing or invalid, authentication fails with this error. See <https://github.com/apache/pulsar/blob/master/pulsar-broker-common/src/main/java/org/apache/pulsar/broker/authentication/AuthenticationProviderTls.java|AuthenticationProviderTls.java> and <https://pulsar.apache.org/docs/3.2.x/security-tls-authentication|TLS authentication docs>.

Would you like more detail on how to resolve or debug this issue?

Sources:
- <https://github.com/apache/pulsar/blob/master/pulsar-broker-common/src/main/java/org/apache/pulsar/broker/authentication/AuthenticationProviderTls.java|AuthenticationProviderTls.java>
- <https://pulsar.apache.org/docs/3.2.x/security-tls-authentication|TLS authentication docs> :+1: 0 button :-1: 0 button 💡 *Hint:* Mention @runllm in the thread for followups.