legionio 1.5.6 → 1.5.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e2128d21b3835602805a33b591e2f8384b9133562d2ea2f5958cc83652e4dbf
-  data.tar.gz: 96e81f0b0064238cd0da2ea32f7c2428cdc18b940b4a4e76272231e37f963696
+  metadata.gz: f1b428e7647279cf546f324872dfcc8a4cfaa18cd86239295d6d970ed3a535f3
+  data.tar.gz: 300e15076db8273550bcc7e8431b0cbff2b644489f1a784213b81732f10dcc11
 SHA512:
-  metadata.gz: aca4cc2b631f9f7caa17a1ba3a3601de56400530cfb8ee2a37de8bb65d450e5ea1c1e67cbeb207838dcba70a85024e57d1abe921a490b94b99ca21decda32577
-  data.tar.gz: 64a0442a7838b090f9ddeab25a9f822a49f7d76fe6dd5418a58408944c3f23ca06b962cdcd85f2cce6c4665579b266d5e1850f61b82c61ac08771f8d46dc91aa
+  metadata.gz: ed8f794e30b35f60492ff8ffea4c6a0a7103ebd90781a132029c60985cf50e8f5118a4f80fa792947ce346f8df3ede23368cf66d9592b1a6e0cf23259651ef77
+  data.tar.gz: 0cb1b113f52cb6748825d75c15b23c149a1c3f0991e2bf5d77577b256516a002592dc9a18ba2bbb2ba52f8b05dba2df3d0978fcc4265b60cad49d74e9c9548df

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Legion Changelog
 
+## [1.5.7] - 2026-03-24
+
+### Changed
+- `Legion::Service` starts `CertRotation` after `Crypt.start` when `security.mtls.enabled: true`
+- `Legion::Service#shutdown` stops `CertRotation` before `Crypt.shutdown`
+- `setup_mtls_rotation` gracefully handles missing mtls support in older `legion-crypt` versions via `LoadError` rescue
+
 ## [1.5.6] - 2026-03-24
 
 ### Changed

data/lib/legion/service.rb

@@ -38,6 +38,7 @@ module Legion
         require 'legion/crypt'
         Legion::Crypt.start
         Legion::Readiness.mark_ready(:crypt)
+        setup_mtls_rotation
       end
 
       Legion::Settings.resolve_secrets!
@@ -495,6 +496,7 @@ module Legion
       Legion::Transport::Connection.shutdown
       Legion::Readiness.mark_not_ready(:transport)
 
+      shutdown_mtls_rotation
       Legion::Crypt.shutdown
       Legion::Readiness.mark_not_ready(:crypt)
 
@@ -569,6 +571,34 @@ module Legion
       Legion::Extensions.hook_extensions
     end
 
+    def setup_mtls_rotation
+      enabled = Legion::Settings[:security]&.dig(:mtls, :enabled)
+      return unless enabled
+
+      unless defined?(Legion::Crypt::CertRotation)
+        require 'legion/crypt/mtls'
+        require 'legion/crypt/cert_rotation'
+      end
+      return unless defined?(Legion::Crypt::CertRotation)
+
+      @cert_rotation = Legion::Crypt::CertRotation.new
+      @cert_rotation.start
+      Legion::Logging.info '[mTLS] CertRotation started'
+    rescue LoadError => e
+      Legion::Logging.warn "mTLS rotation skipped: #{e.message}"
+    rescue StandardError => e
+      Legion::Logging.warn "mTLS rotation setup failed: #{e.message}"
+    end
+
+    def shutdown_mtls_rotation
+      return unless @cert_rotation
+
+      @cert_rotation.stop
+      @cert_rotation = nil
+    rescue StandardError => e
+      Legion::Logging.warn "mTLS rotation shutdown error: #{e.message}"
+    end
+
     def self.log_privacy_mode_status
       privacy = if Legion.const_defined?('Settings') && Legion::Settings.respond_to?(:enterprise_privacy?)
                   Legion::Settings.enterprise_privacy?

data/lib/legion/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Legion
-  VERSION = '1.5.6'
+  VERSION = '1.5.7'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legionio
 version: !ruby/object:Gem::Version
-  version: 1.5.6
+  version: 1.5.7
 platform: ruby
 authors:
 - Esity