mirror of
https://github.com/agent-substrate/substrate.git
synced 2026-11-10 10:13:50 +08:00
Taahir Ahmed
d90e02ce9c
This commit fleshes out localca's rotation support by changing the interface so that signing operations should always go through a pool. All existing in-tree callers are converted over to this pattern. This ensures that signing can properly continue as a CA pool is rotated, without requiring any process restarts. The pool is periodically reloaded from disk in the course of signing operations, with the loaded data being cached for up to a minute. Some code for storing the CA state using PEM files was removed because it seemed to be dead. Follow-on changes will give localjwt a similar treatment, and add administrative commands for running rotations on pools.