hyperledger / fabric-x-committer / 24297046989

91%

main: 92%

Build Type

Pull #530

github

Committed by cendhu

Commit Message

dynamic TLS CA rotation for sidecar and query service

Add dynamic TLS support so that peer organization CA certificates are
automatically updated when config blocks add or remove organizations.

- DynamicTLSManager in utils/connection/ watches config block updates
  and rebuilds the trusted CA pool on the fly
- Sidecar updates TLS immediately during config block processing
- Query service polls the DB periodically for config changes
- Integration test covers add/remove/restore of peer orgs with mTLS
- Infrastructure plumbing for QueryTLSRefreshInterval and
  PeerOrganizationCount in runner config

Signed-off-by: Senthilnathan <cendhu@gmail.com>

Pull Request Pull Request #530: dynamic TLS CA rotation for sidecar and query service

Coverage Stats

119 of 166 new or added lines in 10 files covered. (71.69%)

2 existing lines in 1 file now uncovered.

10174 of 11132 relevant lines covered (91.39%)

41878.4 hits per line