anton-vinogradov opened a new pull request, #13751: URL: https://github.com/apache/ignite/pull/13751
Fixes [IGNITE-29209](https://issues.apache.org/jira/browse/IGNITE-29209). Add `AbstractSslContextFactory.createNew()` to build a fresh SSL context while preserving the existing cached `create()` behavior. The new `createKeyMaterial()` hook supplies key managers and certificate metadata from the same load, so the reported chain cannot come from a later version of the store. Existing manager hooks and the public `SSLContextWrapper` constructor remain supported. The wrapper carries a defensive copy of the chain and distinguishes material with no private key from material whose chain is unknown. Metadata-only wrapping preserves delegate settings and socket factories. This PR supplies the API for the [TLS hot reload umbrella](https://issues.apache.org/jira/browse/IGNITE-28867). Node reload, scheduling and HTTP REST integration are separate changes. Validation: all 9 `SslContextMetadataTest` cases pass, covering cached and fresh creation, one-load consistency, legacy hooks, defensive copies, wrapper behavior, and stores with zero, one or multiple private keys. The Maven reactor build, checkstyle and SSL package Javadoc doclint pass. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
