pinecrypt/pinecrypt-gateway-ocsp-responder
2
1
Fork 0
Code Issues 1 Pull Requests Projects Activity

Startup race condition fixes

Browse Source
This commit is contained in:
Lauri Võsandi 2021-06-09 22:32:11 +03:00
parent 80c4964899
commit 2856771c6d
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ocsp_responder.py
View File

@ -11,6 +11,7 @@ from oscrypto import asymmetric
from prometheus_client import Counter, Histogram from prometheus_client import Counter, Histogram
from sanic import Sanic, response from sanic import Sanic, response
from sanic_prometheus import monitor from sanic_prometheus import monitor
from time import sleep
ocsp_request_valid = Counter("pinecrypt_ocsp_request_valid", ocsp_request_valid = Counter("pinecrypt_ocsp_request_valid",
"Valid OCSP requests") "Valid OCSP requests")
@ -29,10 +30,16 @@ ocsp_response_status = Counter("pinecrypt_ocsp_response_status",
app = Sanic("events") app = Sanic("events")
monitor(app).expose_endpoint() monitor(app).expose_endpoint()
while True:
try:
# Load CA certificate # Load CA certificate
with open("/server-secrets/ca_cert.pem", "rb") as fh: with open("/server-secrets/ca_cert.pem", "rb") as fh:
authority_cert = asymmetric.load_certificate(fh.read()) authority_cert = asymmetric.load_certificate(fh.read())
except FileNotFoundError:
sleep(1)
continue
else:
break
# Load CA private key # Load CA private key
with open("/authority-secrets/ca_key.pem", "rb") as fh: with open("/authority-secrets/ca_key.pem", "rb") as fh: