ai-workspace-services/accounts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ensure TLS chain is served without reloading certificates (#379)

Browse Source
This commit is contained in:
shenlan 2025-10-02 23:23:03 +08:00 committed by GitHub
parent 7344fdb31e
commit 6d19bfb762
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
account/cmd/accountsvc/main.go
View File

@ -222,6 +222,7 @@ var rootCmd = &cobra.Command{
logger.Info("starting account service", "addr", addr, "tls", useTLS)
var listenCertFile, listenKeyFile string
if useTLS {
if tlsSettings.RedirectHTTP {
go func() {
@ -243,7 +244,15 @@ var rootCmd = &cobra.Command{
}()
}
if err := srv.ListenAndServeTLS(certFile, keyFile); err != nil {
if tlsConfig != nil && len(tlsConfig.Certificates) > 0 {
listenCertFile = ""
listenKeyFile = ""
} else {
listenCertFile = certFile
listenKeyFile = keyFile
}
if err := srv.ListenAndServeTLS(listenCertFile, listenKeyFile); err != nil {
if !errors.Is(err, http.ErrServerClosed) {
logger.Error("account service shutdown", "err", err)
return err