anti d1b7e94325 fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44 ...

Uvicorn's h11/httptools HTTP protocols don't populate scope['extensions']['tls'], so /swarm/heartbeat's per-request cert pinning was 403ing every call despite CERT_REQUIRED validating the cert at handshake. Patch RequestResponseCycle.__init__ on both protocol modules to read the peer cert off the asyncio transport and write DER bytes into scope['extensions']['tls']['client_cert_chain']. Importing the module from swarm_api.py auto-installs the patch in the swarmctl uvicorn worker before any request is served.

2026-04-19 22:09:11 -04:00

2.1 KiB

Raw Permalink Blame History

View Raw