hyperledger / fabric-x-committer / 24201048429

91%

main: 91%

Build Type

Pull #530

github

Committed by cendhu

Commit Message

dynamic TLS CA rotation for sidecar and query service

Add dynamic TLS support so that peer organization CA certificates are
automatically updated when config blocks add or remove organizations.

- DynamicTLSManager in utils/connection/ watches config block updates
  and rebuilds the trusted CA pool on the fly
- Sidecar updates TLS immediately during config block processing
- Query service polls the DB periodically for config changes
- Integration test covers add/remove/restore of peer orgs with mTLS
- Infrastructure plumbing for QueryTLSRefreshInterval and
  PeerOrganizationCount in runner config

Signed-off-by: Senthilnathan <cendhu@gmail.com>

Pull Request Pull Request #530: dynamic TLS CA rotation for sidecar and query service

Coverage Stats

120 of 152 new or added lines in 10 files covered. (78.95%)

4 existing lines in 3 files now uncovered.

10156 of 11117 relevant lines covered (91.36%)

41776.69 hits per line