hyperledger / hyperledger/fabric

fabhttp endpoint will need to restart on certificate renewals

Open
#3,467 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
16.7k
Forks
9.1k
Avg merge
5h 38m
Merged PRs (30d)
26

Description

fabhttp server loads static TLS certificates in the server [here](https://github.com/hyperledger/fabric/blob/16259ed70a4cd57513be40a0678213d9274a9ae8/common/fabhttp/tls.go#L28-L46). This will require restart of the server when the certificates are renewed or replaced.

It will be better if the certificates are loaded dynamically as they are loaded in grpc server [here](https://github.com/hyperledger/fabric/blob/98973a8f6360bfcad0c79533a7f45bca3d3e1ae0/internal/pkg/comm/server.go#L85-L95) to not require a restart.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.