@@ -191,41 +191,41 @@ func NewRuntime(t *testing.T, conf *Config) *CommitterRuntime {
191191 c .TLSManager = tlsgen .NewSecureCommunicationManager (t )
192192
193193 t .Log ("create clients certificates per service" )
194- s .ClientsCreds .Vc = c .createClientCerts (t , "validator-committer" )
195- s .ClientsCreds .Verifier = c .createClientCerts (t , "verifier" )
196- s .ClientsCreds .Coordinator = c .createClientCerts (t , "coordinator" )
197- s .ClientsCreds .Query = c .createClientCerts (t , "query-service" )
198- s .ClientsCreds .Sidecar = c .createClientCerts (t , "sidecar" )
194+ s .ClientsCreds .Vc = c .createClientConfigTLS (t , "validator-committer" )
195+ s .ClientsCreds .Verifier = c .createClientConfigTLS (t , "verifier" )
196+ s .ClientsCreds .Coordinator = c .createClientConfigTLS (t , "coordinator" )
197+ s .ClientsCreds .Query = c .createClientConfigTLS (t , "query-service" )
198+ s .ClientsCreds .Sidecar = c .createClientConfigTLS (t , "sidecar" )
199199
200200 t .Log ("Create processes" )
201201 c .MockOrderer = newProcess (t , cmdOrderer , s .WithEndpoint (s .Endpoints .Orderer [0 ]))
202202 for i , e := range s .Endpoints .Verifier {
203203 p := cmdVerifier
204204 p .Name = fmt .Sprintf ("%s-%d" , p .Name , i )
205205 c .Verifier = append (c .Verifier , newProcess (
206- t , p , c .createServerCerts (t , e , "verifier" )))
206+ t , p , c .createSystemConfigWithServerCerts (t , e , "verifier" )))
207207 }
208208
209209 for i , e := range s .Endpoints .VCService {
210210 p := cmdVC
211211 p .Name = fmt .Sprintf ("%s-%d" , p .Name , i )
212212 c .VcService = append (c .VcService , newProcess (
213- t , p , c .createServerCerts (t , e , "validator-committer" )))
213+ t , p , c .createSystemConfigWithServerCerts (t , e , "validator-committer" )))
214214 }
215215
216216 c .Coordinator = newProcess (t ,
217217 cmdCoordinator ,
218- c .createServerCerts (t , s .Endpoints .Coordinator , "coordinator" ),
218+ c .createSystemConfigWithServerCerts (t , s .Endpoints .Coordinator , "coordinator" ),
219219 )
220220
221221 c .QueryService = newProcess (t ,
222222 cmdQuery ,
223- c .createServerCerts (t , s .Endpoints .Query , "query-service" ),
223+ c .createSystemConfigWithServerCerts (t , s .Endpoints .Query , "query-service" ),
224224 )
225225
226226 c .Sidecar = newProcess (t ,
227227 cmdSidecar ,
228- c .createServerCerts (t , s .Endpoints .Sidecar , "sidecar" ),
228+ c .createSystemConfigWithServerCerts (t , s .Endpoints .Sidecar , "sidecar" ),
229229 )
230230
231231 t .Log ("Create clients" )
@@ -638,25 +638,34 @@ func (c *CommitterRuntime) ensureAtLeastLastCommittedBlockNumber(t *testing.T, b
638638 }, 2 * time .Minute , 250 * time .Millisecond )
639639}
640640
641- func (c * CommitterRuntime ) createServerCerts (
641+ func (c * CommitterRuntime ) createSystemConfigWithServerCerts (
642642 t * testing.T ,
643643 endpoints config.ServiceEndpoints ,
644644 serverName string ,
645645) * config.SystemConfig {
646646 t .Helper ()
647647 serviceCfg := c .SystemConfig
648- serviceTLSCertsPath := c .TLSManager .CreateServerCertificate (t , serverName )
649- serviceCfg .ServiceTLS = c .createTLSConfig (serviceTLSCertsPath , serverName )
648+ serviceCfg .ServiceTLS = c .createServerConfigTLS (t , serverName )
650649 serviceCfg .ServiceEndpoints = endpoints
651650 return & serviceCfg
652651}
653652
654- func (c * CommitterRuntime ) createClientCerts (t * testing.T , forServer string ) connection.ConfigTLS {
653+ func (c * CommitterRuntime ) createServerConfigTLS (t * testing.T , asServer string ) connection.ConfigTLS {
655654 t .Helper ()
656- return c .createTLSConfig (c .TLSManager .CreateClientCertificate (t ), forServer )
655+ // We pass asServer twice: first to generate the server's keys,
656+ // and second to include the server name in the ConfigTLS.
657+ // Note: the Server Name Indication (SNI) is not used when creating
658+ // the server's transport credentials, so passing it during TLS config
659+ // creation is not strictly necessary.
660+ return c .createConfigTLS (c .TLSManager .CreateServerCertificate (t , asServer ), asServer )
657661}
658662
659- func (c * CommitterRuntime ) createTLSConfig (paths map [string ]string , serverName string ) connection.ConfigTLS {
663+ func (c * CommitterRuntime ) createClientConfigTLS (t * testing.T , forServer string ) connection.ConfigTLS {
664+ t .Helper ()
665+ return c .createConfigTLS (c .TLSManager .CreateClientCertificate (t ), forServer )
666+ }
667+
668+ func (c * CommitterRuntime ) createConfigTLS (paths map [string ]string , serverName string ) connection.ConfigTLS {
660669 return test .CreateTLSConfigFromPaths (c .config .TLS , paths , serverName )
661670}
662671
0 commit comments