-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Labels
mod/mino/grpcAbout the Mino/grpc moduleAbout the Mino/grpc modulewontfixThis will not be worked onThis will not be worked on
Description
Minogrpc uses a DiskStore to store its own certificate. The DiskStore uses the InMemoryStore as a caching layer, which prevents certificates from being loaded each time from the disk. While performant, this caching layer prevents the node from loading an updated certificate.
Possible solutions:
-
Update the
DiskStoreto watch the server certificate file and reload it once it changes. For example with https://github.com/fsnotify/fsnotify. -
Update the
InMemoryStoreto add an expiration time on elements.
Metadata
Metadata
Assignees
Labels
mod/mino/grpcAbout the Mino/grpc moduleAbout the Mino/grpc modulewontfixThis will not be worked onThis will not be worked on