hyperledger / fabric-x-committer / 22547416404

89%

main: 90%

Build Type

Pull #392

github

Committed by dean-amar

Commit Message

This update introduces dynamic TLS root CA rotation across the platform by adding the utils/dynamictls package for certificate extraction and a new CreateServerTLSConfigWithDynamic method that merges static YAML CAs with live-loaded certificates during handshakes. The architecture is powered by the DynamicService interface and dedicated entry points like RunGrpcDynamicServer that wire atomic certificate updates to the gRPC layer. Both the Sidecar and Query Service implement this interface—the former updating immediately upon receiving config blocks from the orderer, and the latter performing periodic, optimized refreshes from the state database via a configurable ca-fetch-interval. These changes are supported by new testing helpers in utils/test and comprehensive documentation in docs/tls-configurations.md covering the rotation mechanism and configuration.

Signed-off-by: Dean Amar <Dean.Amar@ibm.com>

Pull Request Pull Request #392: [sidecar & query] Add Dynamic client CAs updates without service restart

Run Details

220 of 277 new or added lines in 8 files covered. (79.42%)

14 existing lines in 5 files now uncovered.

9147 of 10231 relevant lines covered (89.4%)

1.3 hits per line