-
Notifications
You must be signed in to change notification settings - Fork 57
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
maintain: remove some unused server options #2174
Conversation
These certs are not used. Removing them helps keep the code base easier to understand and reduces the work done on server startup.
Any way we can capture this commit in an issue for loading certificates in Infra? It seems like an option we will want soon and I'd like an easy way to find this existing work. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It wasn't too long ago that I resolved the issue that asked for the ability to load user-specified certs. Seems like a step backwards. edit: misunderstood the issue
Good call to create an issue about this. I was thinking of adding support for that next. I've created #2176 to track it. I'm not really sure how this code being removed relates to users being able to specify their own cert and key. Supporting that should be really simple, just creating a I suspect we won't use any of what is being removed here to support #2176. |
Ah, sorry, this is the certificate provider stuff. This is related to the plan that we will manage certificate rotation for the user. Can't say I'm excited to see it go away. |
Git makes it easy to restore it later. Is there an issue related to that feature? I can put a note into that issue to link back to this PR, so we can find it easily. |
Relevant issues is #593 |
to explain more, this is part of the server-managed certificates, which is work-in-progress, and I think we still want to build and use it. Jeff put this on hold a couple months ago, so I'm not sure what the status is, but I don't think the code should be considered dead unless that feature is killed. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
discussed concerns. good to go.
Thank you! |
This PR removes some unused
loadCertificate
logic and options from the server. We may restore this in the future when it is being used. For now I think it's better to remove it so that contributors are not distracted by it. Removing it also avoids doing unnecessary work on server startup.This PR also moves one test file into the
pki
package. It was only testing things in that package. Thepki
package is also not used, but at least it's well contained and is not called by any production code.