Class FileWatcherCertificateProvider

java.lang.Object

io.grpc.xds.internal.security.certprovider.CertificateProvider

io.grpc.xds.internal.security.certprovider.FileWatcherCertificateProvider

All Implemented Interfaces:

Closeable, Closeable, AutoCloseable, Runnable

final class FileWatcherCertificateProvider
extends CertificateProvider
implements Runnable

Implementation of CertificateProvider for file watching cert provider.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static class	FileWatcherCertificateProvider.Factory

Nested classes/interfaces inherited from class CertificateProvider

CertificateProvider.DistributorWatcher, CertificateProvider.Watcher

Field Summary

Fields

Modifier and Type	Field	Description
private final Path	certFile
private final Path	keyFile
private FileTime	lastModifiedTimeCert
private FileTime	lastModifiedTimeKey
private FileTime	lastModifiedTimeRoot
private static final Logger	logger
private final long	refreshIntervalInSeconds
private final ScheduledExecutorService	scheduledExecutorService
(package private) ScheduledFuture<?>	scheduledFuture
private boolean	shutdown
private final io.grpc.internal.TimeProvider	timeProvider
private final Path	trustFile

Constructor Summary

Constructors

Constructor	Description
FileWatcherCertificateProvider(CertificateProvider.DistributorWatcher watcher, boolean notifyCertUpdates, String certFile, String keyFile, String trustFile, long refreshIntervalInSeconds, ScheduledExecutorService scheduledExecutorService, io.grpc.internal.TimeProvider timeProvider)

Method Summary

Modifier and Type	Method	Description
(package private) void	checkAndReloadCertificates()
void	close()	Releases all resources and stop cert refreshes and watcher updates.
private long	computeDelaySecondsToCertExpiry(X509Certificate lastCert)
private void	generateErrorIfCurrentCertExpired(Throwable t)
void	run()
private void	scheduleNextRefreshCertificate(long delayInSeconds)
void	start()	Starts the cert refresh and watcher update cycle.

Methods inherited from class CertificateProvider

getWatcher, isNotifyCertUpdates

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

private static final Logger logger

scheduledExecutorService

private final ScheduledExecutorService scheduledExecutorService

timeProvider

private final io.grpc.internal.TimeProvider timeProvider

certFile

private final Path certFile

keyFile

private final Path keyFile

trustFile

private final Path trustFile

refreshIntervalInSeconds

private final long refreshIntervalInSeconds

scheduledFuture

ScheduledFuture<?> scheduledFuture

lastModifiedTimeCert

private FileTime lastModifiedTimeCert

lastModifiedTimeKey

private FileTime lastModifiedTimeKey

lastModifiedTimeRoot

private FileTime lastModifiedTimeRoot

shutdown

private boolean shutdown

Constructor Details

FileWatcherCertificateProvider

FileWatcherCertificateProvider(CertificateProvider.DistributorWatcher watcher,
 boolean notifyCertUpdates,
 String certFile,
 String keyFile,
 String trustFile,
 long refreshIntervalInSeconds,
 ScheduledExecutorService scheduledExecutorService,
 io.grpc.internal.TimeProvider timeProvider)

Method Details

start

public void start()

Description copied from class: CertificateProvider

Starts the cert refresh and watcher update cycle.

Specified by:

start in class CertificateProvider

close

public void close()

Description copied from class: CertificateProvider

Releases all resources and stop cert refreshes and watcher updates.

Specified by:

close in interface AutoCloseable

Specified by:

close in interface Closeable

Specified by:

close in interface Closeable

Specified by:

close in class CertificateProvider

scheduleNextRefreshCertificate

private void scheduleNextRefreshCertificate(long delayInSeconds)

checkAndReloadCertificates

void checkAndReloadCertificates()

generateErrorIfCurrentCertExpired

private void generateErrorIfCurrentCertExpired(Throwable t)

computeDelaySecondsToCertExpiry

private long computeDelaySecondsToCertExpiry(X509Certificate lastCert)

run

public void run()

Specified by:

run in interface Runnable