Method request_new_cert

gateway/src/distributed_certbot.rs:152–180

(&self, domain: &str)

    /// Request new certificate for a domain
    #[tracing::instrument(skip(self))]
    async fn request_new_cert(&self, domain: &str) -> Result<()> {
        let config = self
            .kv_store
            .get_zt_domain_config(domain)
            .context("ZT-Domain config not found")?;

        // Try to acquire lock first
        if !self
            .kv_store
            .try_acquire_cert_lock(domain, RENEW_LOCK_TIMEOUT_SECS)
        {
            // Another node is requesting, wait for it
            info!("another node is requesting, waiting...");
            tokio::time::sleep(Duration::from_secs(30)).await;
            if let Some(cert_data) = self.kv_store.get_cert_data(domain) {
                self.cert_resolver.update_cert(domain, &cert_data)?;
                return Ok(());
            }
            bail!("failed to get certificate from KvStore after waiting");
        }

        let result = self.do_request_new(domain, &config).await;

        if let Err(err) = self.kv_store.release_cert_lock(domain) {
            error!("failed to release lock: {err:?}");
        }

        result
    }

    async fn do_request_new(&self, domain: &str, config: &ZtDomainConfig) -> Result<()> {
        let acme_client = self.get_or_create_acme_client(domain, config).await?;