stream-ssl: Force CA cert file to be read when it appears during bootstrap.
authorBen Pfaff <blp@nicira.com>
Thu, 5 May 2011 17:59:50 +0000 (10:59 -0700)
committerBen Pfaff <blp@nicira.com>
Tue, 24 May 2011 18:26:00 +0000 (11:26 -0700)
commitf14848742aca978783cc7953dc3949877ca25374
tree053942852fb5ffc609c56281d6880e8a02e862d1
parent0ab6decf2ce8bae6290967b6f0a3252dc86c4c55
stream-ssl: Force CA cert file to be read when it appears during bootstrap.

A user report shows the message "reading CA cert
/etc/openvswitch/vswitchd.cacert created by another process" appearing
hundreds of times over a long period of time in the log.  The only way I
can see that this would happen is if update_ssl_config() returned false,
indicating that the CA cert does not need to be re-read because it has not
changed.  This commit should prevent that from happening.

We don't want to simply skip calling update_ssl_config() in this case,
because then the next call to stream_ssl_set_ca_cert_file() would usually
re-read the CA certificate, which is a waste of time.

Also, we might as well rate-limit the message.

NICS-9.
lib/stream-ssl.c