apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-10-26 08:42:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Support Jetty's live cert reload on HTTPS frontend (#7355)

Browse Source 
* Support Jetty's live cert reload

Signed-off-by: Marcus Sorensen <mls@apple.com>

* Update ServerDaemon.java

---------

Signed-off-by: Marcus Sorensen <mls@apple.com>
Co-authored-by: Marcus Sorensen <mls@apple.com>
This commit is contained in:
Marcus Sorensen 2023-03-22 14:38:43 -06:00 committed by GitHub
parent 2aa3f980e8
commit 9ca5f287eb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
client/src/main/java/org/apache/cloudstack/ServerDaemon.java
View File

@ -45,6 +45,7 @@ import org.eclipse.jetty.server.handler.MovedContextHandler;
import org.eclipse.jetty.server.handler.RequestLogHandler;
import org.eclipse.jetty.server.handler.gzip.GzipHandler;
import org.eclipse.jetty.server.session.SessionHandler;
import org.eclipse.jetty.util.ssl.KeyStoreScanner;
import org.eclipse.jetty.util.ssl.SslContextFactory;
import org.eclipse.jetty.util.thread.QueuedThreadPool;
import org.eclipse.jetty.util.thread.ScheduledExecutorScheduler;
@ -241,6 +242,14 @@ public class ServerDaemon implements Daemon {
sslConnector.setPort(httpsPort);
sslConnector.setHost(bindInterface);
server.addConnector(sslConnector);
// add scanner to auto-reload certs
try {
KeyStoreScanner scanner = new KeyStoreScanner(sslContextFactory);
server.addBean(scanner);
} catch (Exception ex) {
LOG.error("failed to set up keystore scanner, manual refresh of certificates will be required", ex);
}
}
}