Quentin Gliech a7a665047e Rebuild the server TLS context in place on certificate reload (#20491) ...

`refresh_certificate` used to build a new `ServerContextFactory` on
every SIGHUP and then replace the factory on each listening port with a
fresh `TLSMemoryBIOFactory` wrapping the new one, reaching into the
port's `factory` attribute to do so.

Twisted asks the context factory for a context on every new connection,
so rebuilding the `SSL.Context` inside the existing factory is enough
for new connections to pick up the new certificate. `start()` now builds
the factory once, and `refresh_certificate` is only the SIGHUP handler.

This is spawning of #20452: Twisted 26.10 annotates `tcp.Port.factory`
as `Factory | None`, and mypy does not accept a `TLSMemoryBIOFactory`
there because its protocol type parameter does not match, so the old
assignment no longer type-checks. The change removes the assignment
rather than suppressing the error.

Verified with trial against Twisted 23.8.0 (our minimum declared dep),
26.4.0 (the current version in the lockfile) and 26.10.0 (the next
version), and with mypy against 26.4.0 and 26.10.0.

2026-11-09 18:37:09 +01:00

..

__init__.py

Correctly mention previous copyright (#16820)

2024-01-23 11:26:48 +00:00

test_context_factory.py

Rebuild the server TLS context in place on certificate reload (#20491)

2026-11-09 18:37:09 +01:00

test_event_signing.py

Fix up event-construction in tests ahead of the Rust event port (#19781)

2026-05-15 10:12:42 +01:00

test_keyring.py

Prefer the stored server key valid for longest when several notaries answered (#20406)

2026-11-04 19:36:40 +00:00