Skip to content

Check certFile modification time#2805

Closed
ndtretyak wants to merge 2 commits intotemporalio:mainfrom
ndtretyak:loader
Closed

Check certFile modification time#2805
ndtretyak wants to merge 2 commits intotemporalio:mainfrom
ndtretyak:loader

Conversation

@ndtretyak
Copy link

Description & motivation 💭

Use the modification time of certFile instead of keyFile, since keyFile may remain unchanged when the certificate is renewed using the same key.

Screenshots (if applicable) 📸

Design Considerations 🎨

Testing 🧪

How was this tested 👻

  • Manual testing
  • E2E tests added
  • Unit tests added

Steps for others to test: 🚶🏽‍♂️🚶🏽‍♀️

Checklists

Draft Checklist

Merge Checklist

Issue(s) closed

Docs

Any docs updates needed?

@ndtretyak ndtretyak requested a review from a team as a code owner July 7, 2025 10:07
@ndtretyak ndtretyak requested review from rossnelson and removed request for a team July 7, 2025 10:07
@vercel
Copy link

vercel bot commented Jul 7, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
holocene ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 7, 2025 10:08am

@CLAassistant
Copy link

CLAassistant commented Jul 7, 2025

CLA assistant check
All committers have signed the CLA.

@rossnelson rossnelson closed this Feb 23, 2026
@rossnelson rossnelson reopened this Feb 23, 2026
@rossnelson
Copy link
Collaborator

Hey @ndtretyak, could you update your fork to the latest from main and push so CI runs again? The e2e checks are stale. Thanks!

rossnelson added a commit that referenced this pull request Feb 24, 2026
The certLoader was using keyFile's modification time to detect
certificate changes. When a certificate is renewed using the same key,
the keyFile remains unchanged and the new cert is never loaded.

This switches to checking certFile's modification time, which correctly
detects renewals regardless of whether the key was rotated.

Based on #2805 by @ndtretyak.
@rossnelson
Copy link
Collaborator

Thanks for this fix @ndtretyak — the analysis is spot-on. Since this has been idle for a bit, I've opened #3178 with the same changes so we can get it merged. Credit to you in the PR description.

@rossnelson rossnelson closed this Feb 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants