Merge pull request #421 from Saphri/tlscontext-on-main

Eager TLS resolution to avoid CDI lookups on worker threads

Author: kjeldpaw

runtime/src/main/java/io/quarkiverse/reactive/messaging/nats/jetstream/client/connection/ConnectionFactoryImpl.java

@@ -4,6 +4,7 @@
 
 import java.util.concurrent.atomic.AtomicReference;
 
+import jakarta.annotation.PostConstruct;
 import jakarta.annotation.PreDestroy;
 import jakarta.enterprise.context.ApplicationScoped;
 import jakarta.enterprise.inject.Produces;
@@ -23,6 +24,16 @@ public class ConnectionFactoryImpl implements ConnectionFactory {
     private final TlsContext tlsContext;
     private final AtomicReference<Connection> connection = new AtomicReference<>();
 
+    @PostConstruct
+    void init() {
+        // Force TLS context resolution on CDI/main thread to avoid CDI lookups from worker threads
+        try {
+            tlsContext.sslContext();
+        } catch (Exception e) {
+            log.warn("Failed to eagerly initialize TLS context", e);
+        }
+    }
+
     @Produces
     @Override
     public Connection create() {

runtime/src/main/java/io/quarkiverse/reactive/messaging/nats/jetstream/client/connection/TlsContextFactoryImpl.java

@@ -2,6 +2,7 @@
 
 import java.util.Optional;
 
+import jakarta.annotation.PostConstruct;
 import jakarta.enterprise.context.ApplicationScoped;
 import jakarta.enterprise.inject.Produces;
 
@@ -17,24 +18,30 @@
 public class TlsContextFactoryImpl implements TlsContextFactory {
     private final ConnectorConfiguration configuration;
     private final TlsConfigurationRegistry registry;
+    private volatile TlsContext cached;
 
-    @Produces
-    @Override
-    public TlsContext create() {
+    @PostConstruct
+    void init() {
         try {
             if (configuration.connection().sslEnabled().orElse(false)) {
                 final var tlsConfiguration = configuration.connection().tlsConfigurationName()
                         .flatMap(registry::get)
                         .orElseGet(this::getDefaultTlsConfiguration);
-                return new TlsContextImpl(Optional.of(tlsConfiguration.createSSLContext()));
+                cached = new TlsContextImpl(Optional.of(tlsConfiguration.createSSLContext()));
             } else {
-                return new TlsContextImpl(Optional.empty());
+                cached = new TlsContextImpl(Optional.empty());
             }
         } catch (Exception e) {
             throw new RuntimeException(e);
         }
     }
 
+    @Produces
+    @Override
+    public TlsContext create() {
+        return cached;
+    }
+
     private TlsConfiguration getDefaultTlsConfiguration() {
         return registry.getDefault().orElseThrow(
                 () -> new IllegalStateException("No Quarkus TLS configuration found for NATS JetStream connection"));