[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Q: Renewing certificates online

To: Ulrich Windl <Ulrich.Windl@rz.uni-regensburg.de>, openldap-technical@openldap.org
Subject: Re: Q: Renewing certificates online
From: Howard Chu <hyc@symas.com>
Date: Tue, 2 Oct 2018 14:49:10 +0100
In-reply-to: <5BB31AC9020000A10002D880@gwsmtp1.uni-regensburg.de>
References: <5BB31AC9020000A10002D880@gwsmtp1.uni-regensburg.de>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0 SeaMonkey/2.53

Ulrich Windl wrote:
> Hi!
> 
> I have a question: I updated the contents of certificate and key file (same location and file name) while slapd was running.
> Is it expected that slapd will recognize (and use) the new certificates, or is a restart or reload needed? Out certificates will expire soon...

slapd or OpenSSL won't see them automatically. But if you modify the olcTLSCertificateFile in cn=config it will get reloaded.
Otherwise you must restart.

-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Follow-Ups:
- Re: Q: Renewing certificates online
  - From: Michael Ströder <michael@stroeder.com>

References:
- Q: Renewing certificates online
  - From: "Ulrich Windl" <Ulrich.Windl@rz.uni-regensburg.de>

Prev by Date: Making contextCSN, entryCSN visible only to sync user?
Next by Date: Re: Q: Renewing certificates online
Index(es):
- Chronological
- Thread