-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Question] TLS certificate rotation #3182
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What is the recommended way of performing TLS certificate rotation with gunicorn?
Based on https://github.com/benoitc/gunicorn/blob/master/gunicorn/sock.py#L219 it seems (by default) the certificate is picked up on each request, so the gunicorn should automatically use the newest one available (and it works fine based on my testing). But I've not found this mentioned anywhere in the docs - is it an undocumented feature(?), or we shouldn't rely on this?
I was going to use the
HUP
signal to reload the workers, but it seems redundant when the certificates are not pre-loaded.The text was updated successfully, but these errors were encountered: