Method update_cert

gateway/src/cert_store.rs:167–193

Update a single certificate (creates new store with updated cert) This is an incremental update that preserves all existing certificates. Write operations are serialized to prevent lost updates.

(&self, domain: &str, data: &CertData)

    /// This is an incremental update that preserves all existing certificates.
    /// Write operations are serialized to prevent lost updates.
    pub fn update_cert(&self, domain: &str, data: &CertData) -> Result<()> {
        let _guard = self
            .write_lock
            .lock()
            .or_panic("failed to acquire write lock");

        let old_store = self.get();

        // Build new store with all existing certs plus the new/updated one
        let mut builder = CertStoreBuilder::new();

        // Copy existing certs (except the one we're replacing)
        for existing_domain in old_store.list_domains() {
            if existing_domain != domain {
                if let Some(existing_data) = old_store.get_cert_data(&existing_domain) {
                    builder.add_cert(&existing_domain, existing_data)?;
                }
            }
        }

        // Add the new/updated cert
        builder.add_cert(domain, data)?;

        // Atomically swap
        self.set(Arc::new(builder.build()));
        Ok(())
    }
}

impl Default for CertResolver {