Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w5fka-003VKO-0K for pgpool-hackers@arkaria.postgresql.org; Thu, 26 Mar 2026 08:07:32 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1w5fkY-001aip-27 for pgpool-hackers@arkaria.postgresql.org; Thu, 26 Mar 2026 08:07:31 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w5fkY-001aii-1D for pgpool-hackers@lists.postgresql.org; Thu, 26 Mar 2026 08:07:30 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1w5fkV-00000001FhO-2r17 for pgpool-hackers@lists.postgresql.org; Thu, 26 Mar 2026 08:07:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Transfer-Encoding:Content-Type: Mime-Version:References:In-Reply-To:From:Subject:Cc:To:Message-Id:Date:Sender :Reply-To:Content-ID:Content-Description; bh=cHsjOCQ1vvzJovyB4TbnUmviHv0nI8EesTFOuxDYS68=; b=XtNHyrEs9uArYZ4LKErzySVvO5 LoJ8b72DXLbASuTznxd0fEBU5S03udd56I2UrO7kwVirsXuwjAXwYbGcYiyY6I3E6AQ9iryX8g24o P2UuAmkHbPGo9Pz1yNYLsHMIS21KHwx+rhiWl+20rNrt9Fg7PoLTctMNj651HUY8Vn1eOY9d10QXX 4ZXOTobiNk3iGgMCw4Gv1l3qpaMHFn7OWarmuTZL7N2GVcu63ZDB+yX+iKV1Y20DgHCPX/4xxVOyd +F7dlZd2R/resggh4X/ZqCiowTAo18X8daxt6DPIgqaAwCVKa81mqheegYkoVTra8BZfllr0eIEM9 fumqMx/g==; Received: from [2409:11:4120:300:b36:bda7:9c39:97e5] (helo=localhost) by meldrar.postgresql.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w5fkT-006LhT-0l; Thu, 26 Mar 2026 08:07:28 +0000 Date: Thu, 26 Mar 2026 17:07:16 +0900 (JST) Message-Id: <20260326.170716.601660341897872041.ishii@postgresql.org> To: bob.ross.19821@gmail.com Cc: pgpool-hackers@lists.postgresql.org Subject: Re: Rotate SSL certificates on reload (SIGHUP) without restart From: Tatsuo Ishii In-Reply-To: References: <20260319.192225.349123033503761335.ishii@postgresql.org> X-Mailer: Mew version 6.8 on Emacs 29.3 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 2409:11:4120:300:b36:bda7:9c39:97e5 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hi Bob, > Hi Tatsuo, > > Please find the attached patch that implements this feature. This patch > allows Pgpool-II to pick up rotated TLS certificates upon receiving a > SIGHUP without a restart, aligning its behavior with PG 12+. > As this is my first time contributing to the Pgpool-II project, please bear > with me if I missed any specific formatting or submission conventions. I am > happy to make any necessary adjustments to the code. Thank you for the patch! I will look into the patch. Regards, -- Tatsuo Ishii SRA OSS K.K. English: http://www.sraoss.co.jp/index_en/ Japanese:http://www.sraoss.co.jp