[
https://issues.apache.org/jira/browse/IGNITE-29209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anton Vinogradov updated IGNITE-29209:
--------------------------------------
Description:
A subclass of {{AbstractSslContextFactory}} can call the protected {{init()}}
method to load a new SSL context. For example, it can pick up updated TLS
settings and stores before a node restarts with the same factory instance. If
the factory already has a context, the base {{create()}} keeps returning it
until a load succeeds.
h3. Compatibility
{{init()}} is final. If your subclass already declares a no-argument {{init()}}
method, rename it and recompile the subclass before upgrading. A subclass built
against an earlier release may fail to load.
[PR #13751|https://github.com/apache/ignite/pull/13751]
was:
When a node restarts with the same SSL factory instance, the factory can now
reload its TLS settings, keys and trust material by calling the protected
{{init()}} method.
The factory replaces its cached context once {{init()}} finishes loading it. If
loading fails, the base {{create()}} continues to return the previous context.
h3. Compatibility
The protected {{sslCtx}} field and the existing key and trust manager hooks
stay in place. Rename an existing no-argument {{init()}} in a subclass before
recompiling.
[PR #13751|https://github.com/apache/ignite/pull/13751]
> Allow SSL context factories to reload their context
> ---------------------------------------------------
>
> Key: IGNITE-29209
> URL: https://issues.apache.org/jira/browse/IGNITE-29209
> Project: Ignite
> Issue Type: Sub-task
> Reporter: Anton Vinogradov
> Assignee: Anton Vinogradov
> Priority: Major
> Labels: ise
> Time Spent: 5h
> Remaining Estimate: 0h
>
> A subclass of {{AbstractSslContextFactory}} can call the protected {{init()}}
> method to load a new SSL context. For example, it can pick up updated TLS
> settings and stores before a node restarts with the same factory instance. If
> the factory already has a context, the base {{create()}} keeps returning it
> until a load succeeds.
> h3. Compatibility
> {{init()}} is final. If your subclass already declares a no-argument
> {{init()}} method, rename it and recompile the subclass before upgrading. A
> subclass built against an earlier release may fail to load.
> [PR #13751|https://github.com/apache/ignite/pull/13751]
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
