https://bz.apache.org/bugzilla/show_bug.cgi?id=65770

--- Comment #8 from Mark Thomas <ma...@apache.org> ---
I've been discussing this with the users recently and came up with the
following approach.

- Lifecycle listener that ships with Tomcat
- Every X minutes (driven by background process but customisable so checks
don't happen every time the background process runs)
- Checks expiry time of each cert.
- For each cert with less than Y days reload TLS config
- If cert still has less than Y days remaining, log a warning

This listener would be disabled by default but available as part of the
standard Tomcat distribution.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to