io.quarkus.tls.runtime.TlsCertificateUpdater Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of quarkus-tls-registry Show documentation

An internal TLS certificate registry.

There is a newer version: 3.17.0

package io.quarkus.tls.runtime;

import java.time.Duration;
import java.util.concurrent.Callable;
import java.util.concurrent.CopyOnWriteArrayList;

import jakarta.enterprise.event.Event;
import jakarta.enterprise.inject.spi.CDI;

import io.quarkus.tls.CertificateUpdatedEvent;
import io.quarkus.tls.TlsConfiguration;
import io.vertx.core.Handler;
import io.vertx.core.Vertx;

/**
 * A helper class that reload the TLS certificates at a configured interval.
 * When the certificate is reloaded, a {@link CertificateUpdatedEvent} is fired.
 */
public class TlsCertificateUpdater {

    private final Vertx vertx;
    private final CopyOnWriteArrayList tasks;
    private final Event event;

    public TlsCertificateUpdater(Vertx vertx) {
        this.vertx = vertx;
        this.tasks = new CopyOnWriteArrayList<>();
        this.event = CDI.current().getBeanManager().getEvent().select(CertificateUpdatedEvent.class);
    }

    public void close() {
        for (Long task : tasks) {
            vertx.cancelTimer(task);
        }
        tasks.clear();
    }

    public void add(String name, TlsConfiguration tlsConfiguration, Duration period) {
        var id = vertx.setPeriodic(period.toMillis(), new Handler() {
            @Override
            public void handle(Long id) {
                vertx.executeBlocking(new Callable() {
                    @Override
                    public Void call() {
                        // Reload is most probably a blocking operation as it needs to reload the certificate from the
                        // file system. Thus, it is executed in a blocking context.
                        // Then we fire the event. This is also potentially blocking, as the consumer are invoked on the
                        // same thread.
                        if (tlsConfiguration.reload()) {
                            event.fire(new CertificateUpdatedEvent(name, tlsConfiguration));
                        }
                        return null;
                    }
                }, false);
            }
        });

        tasks.add(id);
    }

}