etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Support Jetty's live cert reload on HTTPS frontend (#7355) (#250) 

* Support Jetty's live cert reload



* Update ServerDaemon.java

---------

Signed-off-by: Marcus Sorensen <mls@apple.com>
Co-authored-by: Marcus Sorensen <mls@apple.com>
This commit is contained in:
Marcus Sorensen 2023-03-27 09:27:38 -06:00 committed by GitHub
parent 7b8cbcde6c
commit dce4c97787
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
client/src/main/java/org/apache/cloudstack/ServerDaemon.java
View File

@ -45,6 +45,7 @@ import org.eclipse.jetty.server.handler.MovedContextHandler;
import org.eclipse.jetty.server.handler.RequestLogHandler;
import org.eclipse.jetty.server.handler.gzip.GzipHandler;
import org.eclipse.jetty.server.session.SessionHandler;
import org.eclipse.jetty.util.ssl.KeyStoreScanner;
import org.eclipse.jetty.util.ssl.SslContextFactory;
import org.eclipse.jetty.util.thread.QueuedThreadPool;
import org.eclipse.jetty.util.thread.ScheduledExecutorScheduler;
@ -241,6 +242,14 @@ public class ServerDaemon implements Daemon {
sslConnector.setPort(httpsPort);
sslConnector.setHost(bindInterface);
server.addConnector(sslConnector);
// add scanner to auto-reload certs
try {
KeyStoreScanner scanner = new KeyStoreScanner(sslContextFactory);
server.addBean(scanner);
} catch (Exception ex) {
LOG.error("failed to set up keystore scanner, manual refresh of certificates will be required", ex);
}
}
}