Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wE2bH-003bOP-03 for pgpool-hackers@arkaria.postgresql.org; Sat, 18 Apr 2026 10:08:31 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wE2bG-00CkxR-10 for pgpool-hackers@arkaria.postgresql.org; Sat, 18 Apr 2026 10:08:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wE2bG-00CkxK-0S for pgpool-hackers@lists.postgresql.org; Sat, 18 Apr 2026 10:08:30 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wE2bD-00000001blL-3ogv for pgpool-hackers@lists.postgresql.org; Sat, 18 Apr 2026 10:08:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Transfer-Encoding:Content-Type: Mime-Version:References:In-Reply-To:From:Subject:Cc:To:Message-Id:Date:Sender :Reply-To:Content-ID:Content-Description; bh=O6ZLGOr+92DVb0G81s/tNQAJ6MeopZNTyu0m/ZYAQsE=; b=KpJV8PSsOapq8S/HLbmIhG5IRD ejXYrTTduwKX6vhBucdzu/8s1Z9s5r/vREr60mjSZ8gf8qwGYmhYe6iPHVD6Fj7NqbFDx/vBUB0hX Gws70VZ3uU/vIaGVfdfax2xGQGV7GRe9ZPV0uOmPMzQkziLpJ25HzbpKuc24fNU4QHy+LUuK4h2F9 i/Xdt8houBQ9yAb88kGLrmq2hhL26YV9L30Iw46I9EDICRz2Z3EIPr/Vzf80trKWS3VyGlxtYBb7K bsPIZIav3rj5/0L2e0FWZM99L6dutTJplzJ3IVE/0DoufSwLaxW0+Bf1EiXfw7RoI1CVhUhyqVWVN fHn56UUw==; Received: from [2409:11:4120:300:2824:cc17:fa4e:7c39] (helo=localhost) by meldrar.postgresql.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wE2b9-004O1c-1N; Sat, 18 Apr 2026 10:08:27 +0000 Date: Sat, 18 Apr 2026 19:08:14 +0900 (JST) Message-Id: <20260418.190814.809044567365990699.ishii@postgresql.org> To: bob.ross.19821@gmail.com Cc: pgpool-hackers@lists.postgresql.org Subject: Re: Rotate SSL certificates on reload (SIGHUP) without restart From: Tatsuo Ishii In-Reply-To: <20260417.200656.850534290259556895.ishii@postgresql.org> References: <20260417.073733.1428537764192913774.ishii@postgresql.org> <20260417.200656.850534290259556895.ishii@postgresql.org> X-Mailer: Mew version 6.8 on Emacs 29.3 Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 X-Host-Lookup-Failed: Reverse DNS lookup failed for 2409:11:4120:300:2824:cc17:fa4e:7c39 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk SGkgQm9iLA0KDQo+PiBIaSBUYXRzdW8sDQo+PiANCj4+IEkndmUgZml4ZWQgdGhlIHRlc3QgZmFp bHVyZS4gVGhlIGlzc3VlIHdhcyB0aGF0IHRoZSBvcmlnaW5hbCB0ZXN0IHVzZWQgdGhlDQo+PiBz dGF0aWMgc2VsZi1zaWduZWQgc2VydmVyLmNydCBhcyB0aGUgQ0EgYnVuZGxlLiBXaGVuIHNzbF9j YV9jZXJ0IGlzIHNldCwNCj4+IHBncG9vbCB2ZXJpZmllcyB0aGUgYmFja2VuZCBjZXJ0aWZpY2F0 ZSBhZ2FpbnN0IGl0LCBhbmQgdGhlIHNlbGYtc2lnbmVkDQo+PiBjZXJ0IGZhaWxlZCB0aGF0IGNo ZWNrLiBUaGUgZml4IGdlbmVyYXRlcyBhIGRlZGljYXRlZCBzZXJ2ZXIgQ0EgaW4gdGhlIHRlc3QN Cj4+IGFuZCBpc3N1ZXMgYSBiYWNrZW5kIGNlcnQgc2lnbmVkIGJ5IGl0LCBzbyBwZ3Bvb2wgY2Fu IGFsd2F5cyB2ZXJpZnkgdGhlDQo+PiBiYWNrZW5kIHdoaWxlIGNhMS9jYTIgYXJlIGluZGVwZW5k ZW50bHkgc3dhcHBlZCB0byB0ZXN0IGNsaWVudC1jZXJ0IHRydXN0DQo+PiByb3RhdGlvbi4NCj4g DQo+IFRoYXQgbWFrZXMgc2Vuc2UuDQo+IA0KPj4gVGhlIHRlc3Qgbm93IHBhc3NlczoNCj4+IA0K Pj4gDQo+PiANCj4+IA0KPj4gDQo+PiAqQ0EgY2VydCBzd2FwOiBDQTEtc2lnbmVkIGNsaWVudCBj ZXJ0IGFjY2VwdGVkIGJlZm9yZSByZWxvYWQg4oCTIG9rLkNBIGNlcnQNCj4+IHN3YXA6IENBMS1z aWduZWQgY2xpZW50IGNlcnQgcmVqZWN0ZWQgYWZ0ZXIgcmVsb2FkIHRvIENBMiDigJMgb2sudGVz dGluZw0KPj4gMDQyLnNzbF9yZWxvYWQuLi5vay5vdXQgb2YgMSBvazoxIGZhaWxlZDowIHRpbWVv dXQ6MCoNCj4+IA0KPj4gcGdwb29sLmxvZyBzaG93aW5nIGNsaWVudCBjZXJ0IGFjY2VwdGVkIGJl Zm9yZSByZWxvYWQ6DQo+PiANCj4+IA0KPj4gDQo+PiANCj4+ICoyMDI2LTA0LTE3IDA5OjIzOjMx LjQ0OTogY2hpbGQgcGlkIDgxMzc4OiBERUJVRzogIGdvdCB0aGUgU1NMDQo+PiBjZXJ0aWZpY2F0 ZTIwMjYtMDQtMTcgMDk6MjM6MzEuNDQ5OiBjaGlsZCBwaWQgODEzNzg6IERFVEFJTDogIFByb3Rv Y29sDQo+PiBNYWpvcjogMyBNaW5vcjogMCBkYXRhYmFzZTogdGVzdCB1c2VyOiBzc2x0ZXN0MjAy Ni0wNC0xNyAwOToyMzozMS40NTA6DQo+PiBjaGlsZCBwaWQgODEzNzg6IERFVEFJTDogIGNsaWVu dC0+c2VydmVyIFNTTCByZXNwb25zZTogUzIwMjYtMDQtMTcNCj4+IDA5OjIzOjMxLjQ1NTogY2hp bGQgcGlkIDgxMzc4OiBERVRBSUw6ICBhdXRoIGtpbmQ6MCoNCj4+IA0KPj4gU1NMIGNlcnRpZmlj YXRlIHJlbG9hZCBjb21wbGV0ZWQ6DQo+PiANCj4+ICoyMDI2LTA0LTE3IDA5OjIzOjMxLjQ3MTog bWFpbiBwaWQgODEzNDc6IExPRzogIHJlbG9hZCBTU0wgY2VydGlmaWNhdGVzLioNCj4+IA0KPj4g cGdwb29sLmxvZyBzaG93aW5nIGNsaWVudCBjZXJ0IHJlamVjdGVkIGFmdGVyIHJlbG9hZDoNCj4+ IA0KPj4gDQo+PiANCj4+ICoyMDI2LTA0LTE3IDA5OjIzOjMyLjQ4NTogcHNxbCBwaWQgODEzODU6 IERFVEFJTDogIFNTTFJlcXVlc3QgZnJvbQ0KPj4gY2xpZW50MjAyNi0wNC0xNyAwOToyMzozMi40 OTM6IHBzcWwgcGlkIDgxMzg1OiBMT0c6ICBwb29sX3NzbDoNCj4+ICJTU0xfYWNjZXB0IjogImNl cnRpZmljYXRlIHZlcmlmeSBmYWlsZWQiMjAyNi0wNC0xNyAwOToyMzozMi40OTM6IHBzcWwgcGlk DQo+PiA4MTM4NTogRVJST1I6ICBmYWlsZWQgd2hpbGUgcmVhZGluZyBzdGFydHVwIHBhY2tldCoN Cj4+IA0KPj4gTm8gY2hhbmdlcyB0byB0aGUgY29yZSBwYXRjaC4NCj4+IFRoZSB1cGRhdGVkIHY0 IGlzIGF0dGFjaGVkLg0KPiANCj4gTm93IHRoZSB0ZXN0IHN1Y2NlZWRlZCBoZXJlLiAgTWFueSB0 aGFua3MuIEkgd2lsbCBwdXNoIHRoZSBwYXRjaA0KPiB0b21vcnJvdy4NCg0KSSBoYXZlIHB1c2hl ZCB0aGlzIHRvIG1hc3RlciBicmFuY2ggYWxvbmcgd2l0aCBkb2N1bWVudGF0aW9uIGNoYW5nZXMu DQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9naXR3ZWIvP3A9cGdwb29sMi5naXQ7YT1jb21t aXQ7aD05MzFhMzdlN2Y2M2ZlNTE0ZTk4OWQ0MjdlMWIwYzJiN2Y0MzQ0YzBkDQoNClRoYW5rIHlv dSENCi0tDQpUYXRzdW8gSXNoaWkNClNSQSBPU1MgSy5LLg0KRW5nbGlzaDogaHR0cDovL3d3dy5z cmFvc3MuY28uanAvaW5kZXhfZW4vDQpKYXBhbmVzZTpodHRwOi8vd3d3LnNyYW9zcy5jby5qcA0K