hashicorp / hashicorp/go-secure-stdlib
Reload tls_client_ca_file on SIGHUP
Open
enhancement
- Dominant language
- Go
- Stars
- 74
- Forks
- 28
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
Reloading a TCP listener configuration will reload the included tls_cert_file and tls_key_file, but not the tls_client_ca_file.
**Describe the solution you'd like**
Upon reloading a TCP listener's configuration, reload the tls_client_ca_file if it is configured and enabled.
**Describe alternatives you've considered**
Restarting vault is an option, but it is convenient to replace certificate pieces while vault is running and allow vault to reload while still serving traffic.
**Explain any additional use-cases**
**Additional context**
Contributor guide
Assessment
This issue has not been assessed yet.