Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wDK0s-002qh1-1e for pgpool-hackers@arkaria.postgresql.org; Thu, 16 Apr 2026 10:31:59 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wDK0r-005Gtm-2l for pgpool-hackers@arkaria.postgresql.org; Thu, 16 Apr 2026 10:31:57 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wDK0r-005Gte-1P for pgpool-hackers@lists.postgresql.org; Thu, 16 Apr 2026 10:31:57 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wDK0o-00000001OD0-3KBE for pgpool-hackers@lists.postgresql.org; Thu, 16 Apr 2026 10:31:57 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Transfer-Encoding:Content-Type: Mime-Version:References:In-Reply-To:From:Subject:Cc:To:Message-Id:Date:Sender :Reply-To:Content-ID:Content-Description; bh=n9Yr6zhiWA8PUElYjmrL8dN0dM3hSU8KZq1FxLisf28=; b=KgcmgA+ssq6XboYHEBmEwwvLuk xyJmfqQO+MMjdYPMVoZ4GpPIX3z9erYDrb+MnJYpOTL+lTOIbfNqh6XmbjYlL+GZCsnzPLetzkAiR cPH2YT5wEMQ9CUU4kgf5rmIq+Zv9biuKB8Buu7QWc9BLmHQ1y0iqKKIJbrFqR6X0OZQ2HxiD3grjF TNtYJFIoyHI0A1NlX9fwBMsIzmiO48q1q3+rxEYtOqxEXT4W22hbVfysz0e7YTYFqDvbfXHl6wY5k q1vIBhvXxvBYOtKNNX0/3e+XOKuUrFS/j9Tn8z+BMwW6Qk1D68wOJ6QmRO+2fw1wqE/O201KQNwE9 RaoImI9A==; Received: from [2409:11:4120:300:f63e:27d3:66ed:48bc] (helo=localhost) by meldrar.postgresql.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wDK0m-003TnK-1j; Thu, 16 Apr 2026 10:31:54 +0000 Date: Thu, 16 Apr 2026 19:31:38 +0900 (JST) Message-Id: <20260416.193138.2156629846536617464.ishii@postgresql.org> To: bob.ross.19821@gmail.com Cc: pgpool-hackers@lists.postgresql.org Subject: Re: Rotate SSL certificates on reload (SIGHUP) without restart From: Tatsuo Ishii In-Reply-To: References: <20260414.170151.1083817546153854089.ishii@postgresql.org> X-Mailer: Mew version 6.8 on Emacs 29.3 Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 X-Host-Lookup-Failed: Reverse DNS lookup failed for 2409:11:4120:300:f63e:27d3:66ed:48bc (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk SGkgQm9iLA0KDQpUaGFuayB5b3UgZm9yIHRoZSBwYXRjaCENCg0KVW5mb3J0dW5hdGVseSBhZnRl ciBhcHBseWluZyB0aGUgcGF0Y2gsIHRoZSB0ZXN0IGZhaWxlZC4gRnJvbQ0Kc3JjL3Rlc3QvcmVn cmVzc2lvbi9sb2cvMDQyLnNzbF9yZWxvYWQ6DQoNCj09PT09IHNzbF9jYV9jZXJ0IHN3YXAgKGNs aWVudCBjZXJ0IGF1dGggcmVsb2FkKSA9PT09PQ0Kd2FpdGluZyBmb3Igc2VydmVyIHRvIHN0YXJ0 Li4uLjE0NjIyODkgMjAyNi0wNC0xNiAxOToyNTo0OS40OTAgSlNUIExPRzogIHJlZGlyZWN0aW5n IGxvZyBvdXRwdXQgdG8gbG9nZ2luZyBjb2xsZWN0b3IgcHJvY2Vzcw0KMTQ2MjI4OSAyMDI2LTA0 LTE2IDE5OjI1OjQ5LjQ5MCBKU1QgSElOVDogIEZ1dHVyZSBsb2cgb3V0cHV0IHdpbGwgYXBwZWFy IGluIGRpcmVjdG9yeSAibG9nIi4NCiBkb25lDQpzZXJ2ZXIgc3RhcnRlZA0KQ0EgY2VydCBzd2Fw OiBDQTEtc2lnbmVkIGNsaWVudCBjZXJ0IHJlamVjdGVkIGJlZm9yZSByZWxvYWQg4oCTIHVuZXhw ZWN0ZWQuDQoNCkZyb20gcGdwb29sLmxvZzoNCg0KMjAyNi0wNC0xNiAxOToyNjoxMC4xNTA6IGNo aWxkIHBpZCAxNDYyMzMxOiBERVRBSUw6ICBQcm90b2NvbCBNYWpvcjogMTIzNCBNaW5vcjogNTY3 OSBkYXRhYmFzZTogIHVzZXI6IA0KMjAyNi0wNC0xNiAxOToyNjoxMC4xNTA6IGNoaWxkIHBpZCAx NDYyMzMxOiBERUJVRzogIHNlbGVjdGluZyBiYWNrZW5kIGNvbm5lY3Rpb24NCjIwMjYtMDQtMTYg MTk6MjY6MTAuMTUwOiBjaGlsZCBwaWQgMTQ2MjMzMTogREVUQUlMOiAgU1NMUmVxdWVzdCBmcm9t IGNsaWVudA0KMjAyNi0wNC0xNiAxOToyNjoxMC4xNTA6IGNoaWxkIHBpZCAxNDYyMzMxOiBERUJV RzogIHBvb2xfd3JpdGU6IHRvIGZyb250ZW5kOiBraW5kOlMgcG86MA0KMjAyNi0wNC0xNiAxOToy NjoxMC4xNTA6IGNoaWxkIHBpZCAxNDYyMzMxOiBERUJVRzogIHBvb2xfZmx1c2hfaXQ6IGZsdXNo IHNpemU6IDENCjIwMjYtMDQtMTYgMTk6MjY6MTAuMTY3OiBjaGlsZCBwaWQgMTQ2MjMzMTogTE9H OiAgcG9vbF9zc2w6ICJTU0xfYWNjZXB0IjogInRsc3YxIGFsZXJ0IHVua25vd24gY2EiDQoyMDI2 LTA0LTE2IDE5OjI2OjEwLjE2NzogY2hpbGQgcGlkIDE0NjIzMzE6IERFQlVHOiAgdW5hYmxlIHRv IHJlYWQgZGF0YSBmcm9tIGZyb250ZW5kDQoyMDI2LTA0LTE2IDE5OjI2OjEwLjE2NzogY2hpbGQg cGlkIDE0NjIzMzE6IERFVEFJTDogIHNvY2tldCByZWFkIGZhaWxlZCB3aXRoIGVycm9yICJDb25u ZWN0aW9uIHJlc2V0IGJ5IHBlZXIiDQoNClBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgbmVlZCBt b3JlIGluZm8uDQoNClJlZ2FyZHMsDQotLQ0KVGF0c3VvIElzaGlpDQpTUkEgT1NTIEsuSy4NCkVu Z2xpc2g6IGh0dHA6Ly93d3cuc3Jhb3NzLmNvLmpwL2luZGV4X2VuLw0KSmFwYW5lc2U6aHR0cDov L3d3dy5zcmFvc3MuY28uanANCg0KPiBIaSBUYXRzdW8sDQo+IA0KPiBQbGVhc2Ugc2VlIGF0dGFj aGVkIHYyLiBJdCBhZGRzIHJlZ3Jlc3Npb24gY292ZXJhZ2UgZm9yIFNTTCBjZXJ0IHJlbG9hZA0K PiB3aXRoIGNsaWVudCBjZXJ0aWZpY2F0ZSBhdXRoZW50aWNhdGlvbjsgdGhlcmUgYXJlIG5vIGZ1 bmN0aW9uYWwgY29kZQ0KPiBjaGFuZ2VzLg0KPiANCj4gQmVzdCByZWdhcmRzLA0KPiBCb2INCj4g DQo+IA0KPiBPbiBUdWUsIEFwciAxNCwgMjAyNiBhdCAxMDowMuKAr0FNIFRhdHN1byBJc2hpaSA8 aXNoaWlAcG9zdGdyZXNxbC5vcmc+IHdyb3RlOg0KPiANCj4+IEhpIEJvYiwNCj4+DQo+PiA+IEhp IFRhdHN1bywNCj4+ID4NCj4+ID4gUGxlYXNlIGxldCBtZSBrbm93IGlmIHlvdSBuZWVkIGFueSBh c3Npc3RhbmNlIHdpdGggdXBkYXRpbmcgeW91ciB0ZXN0DQo+PiA+IGNhc2VzLiBJIGFtIGJlIGhh cHB5IHRvIGhlbHAuDQo+PiA+DQo+PiA+IFRoYW5rcywNCj4+ID4gQm9iDQo+Pg0KPj4gU29ycnkg Zm9yIGxhdGUuIEkgd2FzIGJ1c3kgd2l0aCBwZXJzb25hbCBhZmZhaXJzIGFuZCBzb21lIG90aGVy DQo+PiBwcm9qZWN0cy4NCj4+DQo+PiA+IE9uIFRodSwgQXByIDIsIDIwMjYgYXQgOTo1N+KAr1BN IEJvYiBSb3NzIDxib2Iucm9zcy4xOTgyMUBnbWFpbC5jb20+DQo+PiB3cm90ZToNCj4+ID4NCj4+ ID4+IEhpIFRhdHN1bywNCj4+ID4+DQo+PiA+PiBUaGFua3MgZm9yIHB1dHRpbmcgdG9nZXRoZXIg dGhlIHJlZ3Jlc3Npb24gdGVzdHMuDQo+PiA+Pg0KPj4gPj4gVGhvdWdodHMgb24geW91ciBxdWVz dGlvbnM6DQo+PiA+PiAtIENBIENlcnRpZmljYXRlcyAtIFllcywgYWRkaW5nIGEgY2VydCBhdXRo IHRlc3QgaXMgaGlnaGx5IHJlY29tbWVuZGVkLg0KPj4gV2UNCj4+ID4+IGNvdWxkIHRlc3QgdGhp cyBieSBnZW5lcmF0aW5nIHR3byBkaWZmZXJlbnQgZHVtbXkgQ0EgY2VydGlmaWNhdGVzLiBTdGFy dA0KPj4gPj4gcGdwb29sIHRydXN0aW5nIENBICMxLCBzd2FwIHRoZSBjb25maWcgdG8gQ0EgIzIs IHJlbG9hZCBhbmQgdmVyaWZ5IGlmDQo+PiA+PiBjbGllbnQgY29ubmVjdGlvbiBjb3JyZWN0bHkg Z2V0cyByZWplY3RlZC4NCj4+DQo+PiBJZiB5b3UgY291bGQgZXh0ZW5kIHRoZSB0ZXN0IGZpbGUg SSBwb3N0ZWQgc28gdGhhdCBpdCBwZXJmb3JtcyBhIGNlcnQNCj4+IGF1dGggdGVzdCwgdGhhdCB3 b3VsZCBiZSBoZWxwZnVsLg0KPj4NCj4+ID4+IC0gREggcGFyYW1ldGVycyAtIHBlcmhhcHMgd2Ug Y2FuIHRlc3QgdGhpcyBieSBwcm92aWRpbmcgYSBub24tZXhpc3RlbnQNCj4+ID4+IGZpbGUgcGF0 aCBhbmQgdGhlbiB1c2UgZ3JlcCB0byBjaGVjayBwZ3Bvb2wubG9nIGZvciBzcGVjaWZpYyB3YXJu aW5nDQo+PiA+PiBtZXNzYWdlIChwZXIgcG9vbF9zc2wuYyBpdOKAmXMg4oCcREg6IGNvdWxkIG5v dCBsb2FkIERIIHBhcmFtZXRlcnPigJ0pIHdoZW4NCj4+ID4+IHBncG9vbCB0cmllcyB0byBsb2Fk IHRoZSBmaWxlLg0KPj4NCj4+IEkgdGhpbmsgaXQgd2lsbCBub3Qgd29yay4NCj4+DQo+PiA9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQo+PiBzdGF0aWMgYm9vbA0KPj4gaW5pdGlhbGl6ZV9kaChTU0xfQ1RYICpjb250ZXh0 KQ0KPj4gew0KPj4gICAgICAgICBESCAgICAgICAgICAgICAgICAgKmRoID0gTlVMTDsNCj4+DQo+ PiAgICAgICAgIFNTTF9DVFhfc2V0X29wdGlvbnMoY29udGV4dCwgU1NMX09QX1NJTkdMRV9ESF9V U0UpOw0KPj4NCj4+ICAgICAgICAgaWYgKHBvb2xfY29uZmlnLT5zc2xfZGhfcGFyYW1zX2ZpbGVb MF0pDQo+PiAgICAgICAgICAgICAgICAgZGggPSBsb2FkX2RoX2ZpbGUocG9vbF9jb25maWctPnNz bF9kaF9wYXJhbXNfZmlsZSk7DQo+PiAgICAgICAgIGlmICghZGgpDQo+PiAgICAgICAgICAgICAg ICAgZGggPSBsb2FkX2RoX2J1ZmZlcihGSUxFX0RIMjA0OCwgc2l6ZW9mKEZJTEVfREgyMDQ4KSk7 DQo+PiAgICAgICAgIGlmICghZGgpDQo+PiAgICAgICAgIHsNCj4+ICAgICAgICAgICAgICAgICBl cmVwb3J0KFdBUk5JTkcsDQo+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIChlcnJt c2coIkRIOiBjb3VsZCBub3QgbG9hZCBESA0KPj4gcGFyYW1ldGVycyIpKSk7DQo+PiAgICAgICAg ICAgICAgICAgcmV0dXJuIGZhbHNlOw0KPj4gICAgICAgICB9DQo+PiA6DQo+PiA6DQo+PiA9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQo+Pg0KPj4gVGhlIGVyZXBvcnQgbWVzc2FnZSBpcyBwcmludGVkIHdoZW4gdGhlIGJ1 aWx0LWluIERIIHBhcmFtZXRlciBmaWxlIGlzDQo+PiBicm9rZW4uIEJ1dCBhcyBsb25nIGFzIHRo ZSBzb3VyY2UgZmlsZSBpcyBmaW5lLCBpdCB3b3VsZCBuZXZlciBoYXBwZW4uDQo+Pg0KPj4gTWF5 YmUgd2Ugc2hvdWxkIGZpeCB0aGUgY29kZSBhYm92ZSBzbyB0aGF0IGl0IGVtaXRzIGVyZXBvcnQg d2hlbiBpdA0KPj4gZmFpbHMgdG8gbG9hZCB0aGUgREggcGFyYW1ldGVyIGZpbGUgc3BlY2lmaWVk IGJ5IHNzbF9kaF9wYXJhbXNfZmlsZT8NCj4+DQo+PiBSZWdhcmRzLA0KPj4gLS0NCj4+IFRhdHN1 byBJc2hpaQ0KPj4gU1JBIE9TUyBLLksuDQo+PiBFbmdsaXNoOiBodHRwOi8vd3d3LnNyYW9zcy5j by5qcC9pbmRleF9lbi8NCj4+IEphcGFuZXNlOmh0dHA6Ly93d3cuc3Jhb3NzLmNvLmpwDQo+Pg0K