Method refreshCertificatesTask

src/Server/ACME/Client.cpp:192–371

}

void Client::refreshCertificatesTask(const Poco::Util::AbstractConfiguration & config)
{
    chassert(keys_initialized);
    chassert(api && api->isReady());

    auto component_guard = Coordination::setCurrentComponent("ACME::Client::refreshCertificatesTask");
    try
    {
        auto context = Context::getGlobalContextInstance();
        auto zk = context->getZooKeeper();

        bool need_refresh = false;
        for (const auto & domain : domains)
        {
            std::string private_key;
            std::string pem_certificate;

            zk->tryGet(fs::path(zookeeper_path) / acme_hostname / "domains" / domain / "private_key", private_key);
            zk->tryGet(fs::path(zookeeper_path) / acme_hostname / "domains" / domain / "certificate", pem_certificate);

            if (private_key.empty() || pem_certificate.empty())
            {
                need_refresh = true;
                break;
            }

            auto x509_certificate_list = X509Certificate::fromBuffer(pem_certificate);
            auto & x509_certificate = x509_certificate_list.front();

            LOG_TRACE(log, "Certificate for domain {} expires on {}", domain, x509_certificate.expiresOn());

            int tzd = 0;
            auto expiration_date = Poco::DateTimeParser::parse("%y%m%d%H%M%S", x509_certificate.expiresOn(), tzd);
            auto best_before = Poco::Timestamp() + Poco::Timespan(refresh_certificates_before_seconds * Poco::Timespan::SECONDS);

            if (expiration_date < best_before)
            {
                LOG_INFO(log, "Certificate for domain {} expires soon, initiating refresh", domain);
                need_refresh = true;
                break;
            }
        }

        if (!need_refresh)
        {
            LOG_DEBUG(log, "All certificates are up to date");

            CertificateReloader::instance().tryLoad(config);

            refresh_certificates_task->scheduleAfter(refresh_certificates_task_interval_ms);
            return;
        }

        auto active_order_path = fs::path(zookeeper_path) / acme_hostname / "active_order";
        if ((!lock || !lock->isLocked()) && zk->exists(active_order_path))
        {
            LOG_DEBUG(
                log,