On 27/06/18 17:21, Christopher Schultz wrote:
> Romain,
> 
> On 6/27/18 11:50 AM, Romain Manni-Bucau wrote:
>> up? any hope we have live reloading of certs in tomcat?
> 
> Yup. Recent versions allow you to reload the SSLHostConfigs.
> 
> I was getting ready to update my presentation on Let's Encrypt,
> actually, so this was a good nudge to actually do that.
> 
> I thought the operation would be exposed via JMX, but it does not
> appear to be so. It's in the Manager application.
> 
> Have a look at what ManagerServlet.sslReload() does.
> 
> markt,

Probably better to ask the dev list as a whole rather than just me. My
view should carry the same weight as every one else's.

(OK, being pedantic the committers views in theory carry more weight
because they can veto a change but in practise if anyone feels that
strongly about an issue then it probably needs more discussion.)

> any objection to taking this code and putting it into the
> Connector under the public method reloadSSLHostConfig to make it (a)
> accessible via JMX and (b) easy to access?

Yes.

The operations are already accessible via JMX on the ProtocolHandlers.
As the refactoring has progressed there has been a steady shift away
from duplicating attributes and methods between the Connector, Protocol
and endpoint. I think there will always need to be some duplication but
it has been trending downwards.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to