DongHyeonka
d646c2f12f
messaging-superpowers-package 설계서/계획서 기반 구현. registry를 19 → 43 leaf로 확장하고 src/messaging 아래 24개 leaf를 등록. - core-api: M1 publish/consume + M2 batch·delayed·pause-resume - policy/transport-spi: 재시도 결정, DLQ orchestration, admission control, lifecycle - kafka·rabbit(Stable): contiguous commit, confirm/return 상관, 배치, 보안 설정 - pulsar·nats(Experimental): 기본 비활성, live 인증 없음을 코드로 기록 - outbox/inbox/claim-check: 트랜잭션 결합, lease, 무결성 검증 - admin: plan → approve → execute를 타입으로 강제 - 문서 9종, infra compose 7종, JMH 벤치마크 3종 검증: 아키텍처 게이트 3종 통과, 24개 leaf 전부 check 통과, messaging 테스트 604개 통과/0 실패. 미완: 계획서가 요구한 실 브로커 IT 40개 중 7개만 작성. Rabbit 13 / Outbox 6 / Inbox 4 / NATS·Pulsar·Share 5 / testkit 2 / starter·admin 3, 그리고 TLS·ACL 2개가 남음.
36 lines
1.5 KiB
Markdown
36 lines
1.5 KiB
Markdown
# TLS material
|
|
|
|
Production profiles require TLS **and** hostname verification; `MessageSecurityValidator` fails
|
|
startup without either.
|
|
|
|
No key material is committed here, and none should be. Certificates are issued by the deployment's
|
|
own PKI and mounted at runtime; a keystore in a repository is a credential in a repository, and
|
|
rotating it means a commit.
|
|
|
|
## Local development
|
|
|
|
The compose files in the sibling directories run plaintext listeners deliberately. They exist to
|
|
reproduce the *messaging* semantics locally, not the transport security, and running them with
|
|
`production: false` in the destination profile is what keeps the validator honest — a profile marked
|
|
`production: true` against a plaintext broker must fail, and that is a test, not an inconvenience.
|
|
|
|
## Generating a local CA for TLS testing
|
|
|
|
```bash
|
|
openssl req -x509 -newkey rsa:4096 -sha256 -days 30 -nodes \
|
|
-keyout ca.key -out ca.crt -subj "/CN=messaging-local-ca"
|
|
|
|
openssl req -newkey rsa:4096 -nodes -keyout broker.key -out broker.csr \
|
|
-subj "/CN=localhost"
|
|
|
|
openssl x509 -req -in broker.csr -CA ca.crt -CAkey ca.key -CAcreateserial \
|
|
-out broker.crt -days 30 -sha256 \
|
|
-extfile <(printf "subjectAltName=DNS:localhost,IP:127.0.0.1")
|
|
```
|
|
|
|
The `subjectAltName` is not optional. Hostname verification is required in production profiles, and
|
|
a certificate without a SAN fails it — which is the correct outcome, not something to work around by
|
|
disabling the check.
|
|
|
|
Generated files are ignored by `.gitignore` in this directory.
|