Method refresh_known_keys

ct_monitor/src/main.rs:232–305

(&mut self)

    }

    async fn refresh_known_keys(&mut self) -> Result<()> {
        let acme_info_url = format!(
            "{}/.dstack/acme-info",
            self.gateway_uri.trim_end_matches('/')
        );
        info!("fetching known public keys from {}", acme_info_url);

        let response = self
            .client
            .get(&acme_info_url)
            .send()
            .await
            .context("failed to fetch acme-info")?;

        if !response.status().is_success() {
            bail!(
                "failed to fetch acme-info: HTTP {}",
                response.status().as_u16()
            );
        }

        let info: AcmeInfoResponse = response
            .json()
            .await
            .context("failed to parse acme-info response")?;

        info!(
            "got {} quoted public keys, verifying...",
            info.quoted_hist_keys.len()
        );

        let mut verified_keys = BTreeSet::new();
        for (i, quoted_key) in info.quoted_hist_keys.iter().enumerate() {
            match self.verify_quoted_key(quoted_key).await {
                Ok((public_key, app_info)) => {
                    info!(
                        "✅ verified public key {}: {}",
                        i,
                        hex_fmt::HexFmt(&public_key)
                    );
                    info!("   app_id: {}", hex_fmt::HexFmt(&app_info.app_id));
                    info!(
                        "   compose_hash: {}",
                        hex_fmt::HexFmt(&app_info.compose_hash)
                    );
                    info!(
                        "   os_image_hash: {}",
                        hex_fmt::HexFmt(&app_info.os_image_hash)
                    );
                    verified_keys.insert(public_key);
                }
                Err(e) => {
                    warn!(
                        "⚠️ failed to verify public key {}: {}",
                        i,
                        hex_fmt::HexFmt(&quoted_key.public_key)
                    );
                    warn!("   error: {:#}", e);