[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slapd and LetsEncrypt certificates: does a cert renewal necessitate a server restart?



--On Tuesday, September 10, 2019 6:07 PM +0200 Michael Ströder <michael@stroeder.com> wrote:

Use ldapmodify to set the new cert in cn=config. No restarts needed.

Nitpicking:
This requires to use new file names for cert and key files, doesn't it?

I'd expect a no-op should work just fine. I.e., do a mod/replace with the same value.

--Quanah



--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>