Skip to content

Minogrpc: Watch for certificate updates #220

@nkcr

Description

@nkcr

Minogrpc uses a DiskStore to store its own certificate. The DiskStore uses the InMemoryStore as a caching layer, which prevents certificates from being loaded each time from the disk. While performant, this caching layer prevents the node from loading an updated certificate.

Possible solutions:

  1. Update the DiskStore to watch the server certificate file and reload it once it changes. For example with https://github.com/fsnotify/fsnotify.

  2. Update the InMemoryStore to add an expiration time on elements.

Metadata

Metadata

Assignees

No one assigned

    Labels

    mod/mino/grpcAbout the Mino/grpc modulewontfixThis will not be worked on

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions