Dynamic reload of TLS configuration

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Dynamic reload of TLS configuration

Christopher Schultz
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

Does anyone know if it is possible to reconfigure Solr's TLS
configuration (specifically, the server key and certificate) without a
restart?

I'm looking for a zero-downtime situation with a single-server and an
updated TLS certificate.

Thanks,
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=5MDT
-----END PGP SIGNATURE-----
Reply | Threaded
Open this post in threaded view
|

Re: Dynamic reload of TLS configuration

Christopher Schultz
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

Ping. Any options for no-downtime TLS reconfiguration?

- -chris

On 4/23/20 11:35, Christopher Schultz wrote:

> All,
>
> Does anyone know if it is possible to reconfigure Solr's TLS
> configuration (specifically, the server key and certificate)
> without a restart?
>
> I'm looking for a zero-downtime situation with a single-server and
> an updated TLS certificate.
>
> Thanks, -chris
>
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=i1PJ
-----END PGP SIGNATURE-----