hyperledger / hyperledger/fabric
fabhttp endpoint will need to restart on certificate renewals
Open
- Dominant language
- Go
- Stars
- 16.7k
- Forks
- 9.1k
- Avg merge
- 5h 38m
- Merged PRs (30d)
- 26
Description
fabhttp server loads static TLS certificates in the server [here](https://github.com/hyperledger/fabric/blob/16259ed70a4cd57513be40a0678213d9274a9ae8/common/fabhttp/tls.go#L28-L46). This will require restart of the server when the certificates are renewed or replaced.
It will be better if the certificates are loaded dynamically as they are loaded in grpc server [here](https://github.com/hyperledger/fabric/blob/98973a8f6360bfcad0c79533a7f45bca3d3e1ae0/internal/pkg/comm/server.go#L85-L95) to not require a restart.
Contributor guide
Assessment
This issue has not been assessed yet.