hashicorp / hashicorp/go-secure-stdlib

Reload tls_client_ca_file on SIGHUP

Open
#39 5 comments 0 reactions 1 assignee Claimed by @kitography View on GitHub
enhancement
Dominant language
Go
Stars
74
Forks
28
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
Reloading a TCP listener configuration will reload the included tls_cert_file and tls_key_file, but not the tls_client_ca_file.

**Describe the solution you'd like**
Upon reloading a TCP listener's configuration, reload the tls_client_ca_file if it is configured and enabled.

**Describe alternatives you've considered**
Restarting vault is an option, but it is convenient to replace certificate pieces while vault is running and allow vault to reload while still serving traffic.

**Explain any additional use-cases**

**Additional context**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.