hyperledger / fabric-x-committer / 24136534248

91%

main: 92%

Build Type

Pull #530

github

Committed by cendhu

Commit Message

dynamic TLS CA rotation for sidecar and query service

Add dynamic TLS support so that peer organization CA certificates are
automatically updated when config blocks add or remove organizations.

- DynamicTLSManager in utils/connection/ watches config block updates
  and rebuilds the trusted CA pool on the fly
- Sidecar updates TLS immediately during config block processing
- Query service polls the DB periodically for config changes
- Integration test covers add/remove/restore of peer orgs with mTLS
- Infrastructure plumbing for QueryTLSRefreshInterval and
  PeerOrganizationCount in runner config

Signed-off-by: Senthilnathan <cendhu@gmail.com>

Pull Request Pull Request #530: dynamic TLS CA rotation for sidecar and query service

Coverage Stats

112 of 150 new or added lines in 7 files covered. (74.67%)

6 existing lines in 3 files now uncovered.

10095 of 11065 relevant lines covered (91.23%)

42254.98 hits per line