google-nomulus/java/google/registry/proxy
jianglai 628aacd754 Cache server certificates for up to 30 min
The server certificates and corresponding keys are encrypted by KMS and stored on GCS. This allows us to easily replace expiring certs without having to roll out a new proxy release. However currently the certificate is obtained as a singleton and used in all connections served by a proxy instance. This means that if we were to upload a new cert, all existing instances will not use it.

This CL makes it so that we only cache the certificate for 30 min, after which a new cert is fetched and decrypted. Local certificates used for testing are still singletons.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=206976318
2018-08-10 13:46:48 -04:00
..
config Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
handler Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
kubernetes Set up GCLB to router web WHOIS traffic 2018-08-10 13:44:25 -04:00
metric Migrating to fluent logging (green) 2018-05-30 12:18:54 -04:00
quota Migrating to fluent logging (green) 2018-05-30 12:18:54 -04:00
resources Open source GCP proxy 2017-11-21 19:19:03 -05:00
terraform Set up GCLB to router web WHOIS traffic 2018-08-10 13:44:25 -04:00
BUILD Add web WHOIS redirect support 2018-08-10 13:46:48 -04:00
CertificateModule.java Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
EppProtocolModule.java Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
GcpJsonFormatter.java Make GCP proxy log in a Stackdriver logging compliant format 2018-03-06 19:23:23 -05:00
HealthCheckProtocolModule.java Add web WHOIS redirect support 2018-08-10 13:46:48 -04:00
HttpsRelayProtocolModule.java Use self signed certificate when running the proxy locally 2018-04-10 16:36:56 -04:00
MetricsModule.java Migrating to fluent logging (green) 2018-05-30 12:18:54 -04:00
Protocol.java Add web WHOIS redirect support 2018-08-10 13:46:48 -04:00
ProxyConfig.java Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
ProxyModule.java Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
ProxyServer.java Add web WHOIS redirect support 2018-08-10 13:46:48 -04:00
WebWhoisProtocolsModule.java Cache server certificates for up to 30 min 2018-08-10 13:46:48 -04:00
WhoisProtocolModule.java Clean up some code quality issues in GCP proxy 2018-03-19 18:44:12 -04:00