Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] Updating SSL keystore

On 06/02/2017 00:59, Simone Bordet wrote:
Hi,

On Sat, Feb 4, 2017 at 12:38 PM, John English <john.foreign@xxxxxxxxx> wrote:
When I renew my SSL certificate and update my keystore, is it possible to
get the server to reload the new certificate without restarting the server?

(I'm now using Jetty 9.4, BTW.)

Yes it is possible since we fixed
https://github.com/eclipse/jetty.project/issues/918.

There are gotchas in doing that, but the more feedback we get on this
feature, the better we can round off rough edges.

That sounds excellent. Is there any documentation/examples showing how to use this feature? My initial thought is to add a thread that wakes up every so many hours, checks the date on the keystore, and reloads if it's been updated... but then I need to locate the keystore file... I could add a servlet config parameter, but maybe there's another way? Any suggestions?

Thanks,

--
John English


Back to the top