diff options
Diffstat (limited to 'src/cert_store.rs')
-rw-r--r-- | src/cert_store.rs | 66 |
1 files changed, 57 insertions, 9 deletions
diff --git a/src/cert_store.rs b/src/cert_store.rs index abbc83d..2d1b772 100644 --- a/src/cert_store.rs +++ b/src/cert_store.rs @@ -145,6 +145,47 @@ impl CertStore { self.gen_self_signed_certificate(domain) } + pub async fn warmup_memory_store(self: &Arc<Self>) -> Result<()> { + let consul_certs = self + .consul + .kv_get_prefix("certs/", None) + .await? + .into_inner(); + + trace!( + "Fetched {} certificate entries from Consul", + consul_certs.len() + ); + let mut loaded_certs: usize = 0; + for (domain, cert) in consul_certs { + let certser: CertSer = match serde_json::from_slice(&cert) { + Ok(cs) => cs, + Err(e) => { + warn!("Could not deserialize CertSer for {domain}: {e}"); + continue; + } + }; + + let cert = match Cert::new(certser) { + Ok(c) => c, + Err(e) => { + warn!("Could not create Cert from CertSer for domain {domain}: {e}"); + continue; + } + }; + + self.certs + .write() + .unwrap() + .insert(domain.to_string(), Arc::new(cert)); + + debug!("({domain}) Certificate loaded from Consul to the Memory Store"); + loaded_certs += 1; + } + info!("Memory store warmed up with {loaded_certs} certificates"); + Ok(()) + } + pub async fn check_cert(self: &Arc<Self>, domain: &str) -> Result<()> { // First, try locally. { @@ -162,16 +203,23 @@ impl CertStore { .kv_get_json::<CertSer>(&format!("certs/{}", domain)) .await? { - if let Ok(cert) = Cert::new(consul_cert) { - let cert = Arc::new(cert); - self.certs - .write() - .unwrap() - .insert(domain.to_string(), cert.clone()); - if !cert.is_old() { - return Ok(()); + match Cert::new(consul_cert) { + Ok(cert) => { + let cert = Arc::new(cert); + self.certs + .write() + .unwrap() + .insert(domain.to_string(), cert.clone()); + debug!("({domain}) Certificate loaded from Consul to the Memory Store"); + + if !cert.is_old() { + return Ok(()); + } } - } + Err(e) => { + warn!("Could not create Cert from CertSer for domain {domain}: {e}"); + } + }; } // Third, ask from Let's Encrypt |