https://bz.apache.org/bugzilla/show_bug.cgi?id=55770
--- Comment #3 from Mark Thomas <ma...@apache.org> --- The solution is to replace the SSLContext. That should be fairly simple for JSSE. It is a little more 'interesting' for OpenSSL since you need to destroy the SSLContext and you can't do that while it is in use but that should be a solvable problem. The advantage of this approach is you can reload the entire TLS config so it can beused to update server certs, trust stores etc as well as CRL. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org