Method tryLoadImpl

src/Server/CertificateReloader.cpp:176–225

}

void CertificateReloader::tryLoadImpl(const Poco::Util::AbstractConfiguration & config, SSL_CTX * ctx, const std::string & prefix)
{
    /// If at least one of the files is modified - recreate
    std::string new_cert_path = config.getString(prefix + "certificateFile", "");
    std::string new_key_path = config.getString(prefix + "privateKeyFile", "");

    if (config.has("acme") && prefix == Poco::Net::SSLManager::CFG_SERVER_PREFIX)
    {
        if (!new_cert_path.empty() || !new_key_path.empty())
            throw Exception(ErrorCodes::INVALID_CONFIG_PARAMETER, "Static TLS keys and ACME provider are enabled at the same time.");

        tryLoadACMECertificate(ctx, prefix);

        return;
    }

    /// For empty paths (that means, that user doesn't want to use certificates)
    /// no processing required
    if (new_cert_path.empty() || new_key_path.empty())
    {
        LOG_INFO(log, "One of paths is empty. Cannot apply new configuration for certificates. Fill all paths and try again.");
        return;
    }

    try
    {
        auto it = findOrInsert(ctx, prefix);

        bool cert_file_changed = it->cert_file.changeIfModified(std::move(new_cert_path), log);
        bool key_file_changed = it->key_file.changeIfModified(std::move(new_key_path), log);

        if (cert_file_changed || key_file_changed)
        {
            LOG_DEBUG(log, "Reloading certificate ({}) and key ({}).", it->cert_file.path, it->key_file.path);

            std::string pass_phrase = config.getString(prefix + "privateKeyPassphraseHandler.options.password", "");
            it->data.set(std::make_unique<const Data>(it->cert_file.path, it->key_file.path, pass_phrase));

            LOG_INFO(log, "Reloaded certificate ({}) and key ({}).", it->cert_file.path, it->key_file.path);
        }

        /// If callback is not set yet
        if (!it->initialized)
            init(&*it);
    }
    catch (...)
    {
        LOG_ERROR(log, getCurrentExceptionMessageAndPattern(/* with_stacktrace */ false));
    }
}


void CertificateReloader::tryReloadAll(const Poco::Util::AbstractConfiguration & config)