Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vC9fr-009hA4-0P for pgpool-hackers@arkaria.postgresql.org; Fri, 24 Oct 2025 04:45:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1vC9fp-00DfXs-7Y for pgpool-hackers@arkaria.postgresql.org; Fri, 24 Oct 2025 04:45:08 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vC9fp-00DfXj-1d for pgpool-hackers@lists.postgresql.org; Fri, 24 Oct 2025 04:45:08 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vC9fk-003TUa-1a for pgpool-hackers@lists.postgresql.org; Fri, 24 Oct 2025 04:45:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Transfer-Encoding:Content-Type: Mime-Version:References:In-Reply-To:From:Subject:Cc:To:Message-Id:Date:Sender :Reply-To:Content-ID:Content-Description; bh=Gssv1Sku4kr9qWFC18oYJ6PLkCtJG2oYYovvbjPnSXE=; b=sN+vjJxUjn21vuuRXbXkvM3j80 cZtRGBH4fUqUHBua7BWZHj8vUfwKbU1U+dMjaX4fBjfzDy/uoJ3kvS4Wt5UYf1a0i8bG0fe+x95GN YnSX7npdmyUa1yEt1fa8vLx5N5SrO/Arfa7qn7H/L0qmv34MAfoioa2axlvHbTAOEe/0O86hEOe4N YADlLz/dJ/HlaEPZXE3gKBxcl6w5SDxAnY5xgdYHRpft42VArPvNjM7FrhMRwUdOE6qNysP5e6uKC mcLnnDijMKhw3AEVhuW1XSzGzavVaCmzBT5fTZLSxyhjJrqc92pZrq+10goKv5zYKKv+IqiWithya 3fX07MoA==; Received: from [2409:11:4120:300:ed27:2147:ae2b:84de] (helo=localhost) by meldrar.postgresql.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vC9fc-009H0L-0o; Fri, 24 Oct 2025 04:44:58 +0000 Date: Fri, 24 Oct 2025 13:44:47 +0900 (JST) Message-Id: <20251024.134447.1860326874693905337.ishii@postgresql.org> To: bob.ross.19821@gmail.com Cc: pgpool-hackers@lists.postgresql.org Subject: Re: Rotate SSL certificates on reload (SIGHUP) without restart From: Tatsuo Ishii In-Reply-To: References: X-Mailer: Mew version 6.8 on Emacs 29.3 Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-7 Content-Transfer-Encoding: base64 X-Host-Lookup-Failed: Reverse DNS lookup failed for 2409:11:4120:300:ed27:2147:ae2b:84de (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk PiBIZWxsbywNCj4gDQo+IFBsZWFzZSBjb25zaWRlciBhZGRpbmcgc3VwcG9ydCBmb3Igcm90YXRp bmcgU1NMIGNlcnRpZmljYXRlcyBvbiByZWxvYWRpbmcNCj4gcGdwb29sMiAoaS5lLiwgc2VuZGlu ZyBTSUdIVVAgdG8gdGhlIHBncG9vbCBwYXJlbnQpLCBzbyB0aGF0IGNlcnRpZmljYXRlDQo+IHJv dGF0aW9ucyBkbyBub3QgcmVxdWlyZSBhIGZ1bGwgc2VydmljZSByZXN0YXJ0LiBQb3N0Z3JlU1FM IGNhbiBwaWNrIHVwIG5ldw0KPiBjZXJ0aWZpY2F0ZXMgb24gcmVsb2FkL1NJR0hVUDsgcGdwb29s IGN1cnJlbnRseSByZXF1aXJlcyBhIHJlc3RhcnQsIHdoaWNoDQo+IGNhdXNlcyBjb25uZWN0aW9u IGRpc3J1cHRpb25zLg0KPiANCj4gKkN1cnJlbnQgYmVoYXZpb3I6Kg0KPiANCj4gICAgLSBSZXBs YWNlIGNlcnRpZmljYXRlL2tleSBmaWxlcyB1c2VkIGJ5IHBncG9vbCAoZS5nLiwgc2VydmVyLmNy dCwNCj4gICAgc2VydmVyLmtleSwgcmVsYXRlZCBDQSBjaGFpbikuDQo+ICAgIC0gUnVuIHN5c3Rl bWN0bCByZWxvYWQgcGdwb29sMiAoc2VuZCBTSUdIVVAgdG8gdGhlIHBncG9vbCBwYXJlbnQpLg0K PiAgICAtIE9ic2VydmF0aW9uczogRXhpc3RpbmcgYW5kIG5ldyBjbGllbnQgY29ubmVjdGlvbnMg Y29udGludWUgdG8gcHJlc2VudA0KPiAgICB0aGUgb2xkIGNlcnRpZmljYXRlLiBPbmx5IHN5c3Rl bWN0bCByZXN0YXJ0IHBncG9vbDIgYXBwbGllcyB0aGUgbmV3IGNlcnRzDQo+ICAgIChjYXVzaW5n IGNvbm5lY3Rpb24gaW50ZXJydXB0aW9ucykuDQoNClllcywgdGhhdCdzIHRoZSBjdXJyZW50IGJl aGF2aW9yIGFzIGRlc2NyaWJlZCBpbiB0aGUgZG9jcy4NCg0KPiAqRXhwZWN0ZWQgYmVoYXZpb3I6 Kg0KPiANCj4gICAgLSBBZnRlciBzeXN0ZW1jdGwgcmVsb2FkIHBncG9vbDIgLyBTSUdIVVAsIHBn cG9vbCBzaG91bGQgcmUtcmVhZA0KPiAgICBTU0wtcmVsYXRlZCBjb25maWd1cmF0aW9uIChzZXJ2 ZXIgY2VydCwgcHJpdmF0ZSBrZXksIGNoYWluL0NBLCBDUkwgaWYNCj4gICAgY29uZmlndXJlZCkg YW5kIHVzZSB0aGVtIGZvciBuZXcgY2xpZW50IGNvbm5lY3Rpb25zLCB3aXRob3V0IHJlcXVpcmlu ZyBhDQo+ICAgIGZ1bGwgcmVzdGFydC4NCg0KRG9hYmxlIGJ1dCBuZWVkcyBtYWpvciBzdXJnZXJ5 IHRvIHRoZSBTU0wgc3Vic3lzdGVtDQooc3JjL3V0aWxzL3Bvb2xfc3NsLmMpIGFzIGl0IGFzc3Vt ZXMgdGhhdCBTU0wgY29uZmlndXJhdGlvbnMgYXJlIG5ldmVyDQpjaGFuZ2VkIHVudGlsIHJlc3Rh cnRpbmcuDQoNCj4gICAgLSBFeGlzdGluZyBjb25uZWN0aW9ucyBjYW4gY29udGludWUgd2l0aCB0 aGUgb2xkIGNvbnRleHQ7IG9ubHkgbmV3DQo+ICAgIGhhbmRzaGFrZXMgc2hvdWxkIHVzZSB0aGUg dXBkYXRlZCBtYXRlcmlhbHMuDQoNClByb2JhYmx5IGRvYWJsZS4NCg0KPiAgICAtIElmIHJlbG9h ZCBmYWlscywgbG9nIGEgY2xlYXIgZXJyb3IgYW5kIGtlZXAgdXNpbmcgdGhlIHByZXZpb3VzIGNv bnRleHQNCj4gICAgdG8gYXZvaWQgYnJlYWtpbmcgY2xpZW50cy4NCj4gICAgLSBDb25zaWRlciBw YXJpdHkgd2l0aCBQb3N0Z3JlU1FMonMgU0lHSFVQIGJlaGF2aW9yIGZvciBjZXJ0aWZpY2F0ZQ0K PiAgICByZWxvYWRzIHdoZXJlIGZlYXNpYmxlLg0KDQpOb3Qgc3VyZSBpZiBpdCdzIGRvYWJsZS4g TmVlZHMgbW9yZSByZXNlYXJjaCBvbiBjdXJyZW50IGNvZGUuDQoNCkJUVywgUG9zdGdyZVNRTCBi ZWhhdmVzIGludGVyZXN0aW5nbHkuDQoNCiMgInNlcnZlci5rZXkiIGlzIHRoZSBjb3JyZWN0IHNz bF9rZXlfZmlsZS4NCg0KdGVzdD0jIHNob3cgc3NsX2tleV9maWxlOw0KIHNzbF9rZXlfZmlsZSAN Ci0tLS0tLS0tLS0tLS0tDQogc2VydmVyLmtleQ0KKDEgcm93KQ0KDQp0ZXN0PSMgXHENCnQtaXNo aWkkIHBzcWwgLXAgMTEwMDIgLWggbG9jYWxob3N0IHRlc3QNCnBzcWwgKDE4LjApDQpTU0wgY29u bmVjdGlvbiAocHJvdG9jb2w6IFRMU3YxLjMsIGNpcGhlcjogVExTX0FFU18yNTZfR0NNX1NIQTM4 NCwgY29tcHJlc3Npb246IG9mZiwgQUxQTjogcG9zdGdyZXNxbCkNClR5cGUgImhlbHAiIGZvciBo ZWxwLg0KDQojIENoYW5nZSBzc2xfa2V5X2ZpbGUgdG8gInNlcnZlci5rZXkxIiB3aGljaCBkb2Vz IG5vdCBleGlzdHMuDQojIGFuZCByZWxvYWQNCg0KdC1pc2hpaSQgcGdfY3RsIC1EIGRhdGEwIHJl bG9hZA0Kc2VydmVyIHNpZ25hbGVkDQoNCiMga2VlcCBvbiB1c2luZyBTU0wgY29ubmVjdGlvbg0K DQp0LWlzaGlpJCBwc3FsIC1wIDExMDAyIC1oIGxvY2FsaG9zdCB0ZXN0DQpwc3FsICgxOC4wKQ0K U1NMIGNvbm5lY3Rpb24gKHByb3RvY29sOiBUTFN2MS4zLCBjaXBoZXI6IFRMU19BRVNfMjU2X0dD TV9TSEEzODQsIGNvbXByZXNzaW9uOiBvZmYsIEFMUE46IHBvc3RncmVzcWwpDQpUeXBlICJoZWxw IiBmb3IgaGVscC4NCg0KIyBJdCBzZWVtcyBQb3N0Z3JlU1FMIGtlZXAgb24gdXNpbmcgdGggcHJl dmlvdXMgc3NsX2tleV9maWxlIHZhbHVlLA0KIyBidXQgaXQgc2hvd3MgdGhlIG5ldyBzc2xfa2V5 X2ZpbGUgdmFsdWUuDQoNCnRlc3Q9IyBzaG93IHNzbF9rZXlfZmlsZTsNCiBzc2xfa2V5X2ZpbGUg DQotLS0tLS0tLS0tLS0tLQ0KIHNlcnZlci5rZXkxDQooMSByb3cpDQoNCkJlc3QgcmVnYXJkcywN Ci0tDQpUYXRzdW8gSXNoaWkNClNSQSBPU1MgSy5LLg0KRW5nbGlzaDogaHR0cDovL3d3dy5zcmFv c3MuY28uanAvaW5kZXhfZW4vDQpKYXBhbmVzZTpodHRwOi8vd3d3LnNyYW9zcy5jby5qcA0K