apache / apache/servicecomb-java-chassis

Java-Chassis 能否支持 TLS 证书热更新

Open
#2,790 0 comments 0 reactions 0 assignees View on GitHub
need discussion
Dominant language
Java
Stars
1.9k
Forks
814
Avg merge
8d 23h
Merged PRs (30d)
1

Description

背景:
TLS证书可能过期, 我们已有机制可以自动在服务器上更新 TLS 证书, 但 Java-Chassis 框架当前需要重启进程才能加载新的 TLS 证书(REST over Vert.x传输模式)

能否支持 TLS 证书热更新, 让业务进程能够在不重启进程的情况下平滑替换使用新的 TLS 证书?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the REST over Vert.x transport's TLS initialization and the existing server-side mechanism that updates TLS certificates. Completion means a running business process can smoothly replace an expired certificate without restarting. The issue names no files or tests, so the implementation path requires investigation.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.