Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reload up to date SSL certificates without restarting server? #233

Open
seidnerj opened this issue May 17, 2024 · 0 comments
Open

Reload up to date SSL certificates without restarting server? #233

seidnerj opened this issue May 17, 2024 · 0 comments

Comments

@seidnerj
Copy link
Contributor

seidnerj commented May 17, 2024

I think the title says it all. When we need to rotate certificates due to expiration, we have to do a rolling "restart" for the servers. We take each server out of the LB, restart it, add it back and proceed to the next server.

Is it possible to have hypercorn either reload certificates? e.g. once it notices a change in the filesystem and/or have it reload it by pinging an endpoint/running an executable or via specific code we could then initiate from a specialized endpoint.

I did find some potentially relevant discussions but looking through the code I did not find any way to currently achieve this:

  1. https://stackoverflow.com/questions/57812501/python-twisted-is-it-possible-to-reload-certificates-on-the-fly
  2. https://stackoverflow.com/questions/43860469/long-running-asyncio-server-reload-certificate
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant