MIME-Version: 1.0
References: 
 <CAHtZvrddqfbnERYY_DqgURWCjuXeTjM0y08k-ZP_B0bAHYx2ag@mail.gmail.com>
 <20251024.134447.1860326874693905337.ishii@postgresql.org>
 <CAHtZvrdYG5ebRkZF+tZOqOEZ4WMjMjAC8efiKBRKQua2JHpJ9g@mail.gmail.com>
 <20260319.192225.349123033503761335.ishii@postgresql.org>
In-Reply-To: <20260319.192225.349123033503761335.ishii@postgresql.org>
From: Bob Ross <bob.ross.19821@gmail.com>
Date: Wed, 25 Mar 2026 12:04:03 +0100
Message-ID: 
 <CAHtZvrdud7gjX9pq7ayU2VBQkCosZ7qcx6L9r-KbQkqKW_D9eQ@mail.gmail.com>
Subject: Re: Rotate SSL certificates on reload (SIGHUP) without restart
To: Tatsuo Ishii <ishii@postgresql.org>
Cc: pgpool-hackers@lists.postgresql.org
Content-Type: multipart/mixed; boundary="00000000000088ab11064dd73a24"
Archived-At: 
 <https://www.postgresql.org/message-id/CAHtZvrdud7gjX9pq7ayU2VBQkCosZ7qcx6L9r-KbQkqKW_D9eQ%40mail.gmail.com>
Precedence: bulk

--00000000000088ab11064dd73a24
Content-Type: multipart/alternative; boundary="00000000000088ab0f064dd73a22"

--00000000000088ab0f064dd73a22
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Tatsuo,

Please find the attached patch that implements this feature. This patch
allows Pgpool-II to pick up rotated TLS certificates upon receiving a
SIGHUP without a restart, aligning its behavior with PG 12+.
As this is my first time contributing to the Pgpool-II project, please bear
with me if I missed any specific formatting or submission conventions. I am
happy to make any necessary adjustments to the code.

Thanks,
Bob

On Thu, Mar 19, 2026 at 11:22=E2=80=AFAM Tatsuo Ishii <ishii@postgresql.org=
> wrote:

> Hi Bob,
>
> > Hi Tatsuo,
> >
> > Have there been any further considerations regarding changes to the
> pgPool
> > codebase to support SSL certificate rotation on reload?
> >
> > As DigiCert has announced last year (
> >
> https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-r=
educe-to-47-days
> ),
> > TLS/SSL certificate lifetimes will be reduced progressively in the comi=
ng
> > years, with the industry moving toward much shorter validity periods.
> This
> > makes the current requirement to fully restart the service for
> certificate
> > renewal increasingly impractical.
> >
> > Please let us know whether this enhancement is being considered, or if
> > there are any plans or timelines for addressing it.
>
> I just have too many things to do for now (fixing bugs and evaluating
> proposed patches), and I cannot estimate timelines for this. Plus, I
> am not super familiar with this are (SSL). If you could provide
> patches for this, it would greatly help me.
>
> Best regards,
> --
> Tatsuo Ishii
> SRA OSS K.K.
> English: http://www.sraoss.co.jp/index_en/
> Japanese:http://www.sraoss.co.jp
>

--00000000000088ab0f064dd73a22
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">Hi Tatsuo,<div><br></div><div>Please find=
 the attached patch that implements this feature. This patch allows Pgpool-=
II to pick up rotated TLS certificates upon receiving a SIGHUP without a re=
start, aligning its behavior with PG 12+.<br>As this is my first time contr=
ibuting to the Pgpool-II project, please bear with me if I missed any speci=
fic formatting or submission conventions. I am happy to make any necessary =
adjustments to the code.</div><div><br></div><div>Thanks,</div><div>Bob</di=
v></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"lt=
r" class=3D"gmail_attr">On Thu, Mar 19, 2026 at 11:22=E2=80=AFAM Tatsuo Ish=
ii &lt;<a href=3D"mailto:ishii@postgresql.org">ishii@postgresql.org</a>&gt;=
 wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px =
0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Bob,<=
br>
<br>
&gt; Hi Tatsuo,<br>
&gt; <br>
&gt; Have there been any further considerations regarding changes to the pg=
Pool<br>
&gt; codebase to support SSL certificate rotation on reload?<br>
&gt; <br>
&gt; As DigiCert has announced last year (<br>
&gt; <a href=3D"https://www.digicert.com/blog/tls-certificate-lifetimes-wil=
l-officially-reduce-to-47-days" rel=3D"noreferrer" target=3D"_blank">https:=
//www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to=
-47-days</a>),<br>
&gt; TLS/SSL certificate lifetimes will be reduced progressively in the com=
ing<br>
&gt; years, with the industry moving toward much shorter validity periods. =
This<br>
&gt; makes the current requirement to fully restart the service for certifi=
cate<br>
&gt; renewal increasingly impractical.<br>
&gt; <br>
&gt; Please let us know whether this enhancement is being considered, or if=
<br>
&gt; there are any plans or timelines for addressing it.<br>
<br>
I just have too many things to do for now (fixing bugs and evaluating<br>
proposed patches), and I cannot estimate timelines for this. Plus, I<br>
am not super familiar with this are (SSL). If you could provide<br>
patches for this, it would greatly help me.<br>
<br>
Best regards,<br>
--<br>
Tatsuo Ishii<br>
SRA OSS K.K.<br>
English: <a href=3D"http://www.sraoss.co.jp/index_en/" rel=3D"noreferrer" t=
arget=3D"_blank">http://www.sraoss.co.jp/index_en/</a><br>
Japanese:<a href=3D"http://www.sraoss.co.jp" rel=3D"noreferrer" target=3D"_=
blank">http://www.sraoss.co.jp</a><br>
</blockquote></div></div>

--00000000000088ab0f064dd73a22--

--00000000000088ab11064dd73a24
Content-Type: application/octet-stream;
	name="0001-feat-reload-SSL-certificates-on-SIGHUP.c"
Content-Disposition: attachment;
	filename="0001-feat-reload-SSL-certificates-on-SIGHUP.c"
Content-Transfer-Encoding: base64
Content-ID: <f_mn5xna9q0>
X-Attachment-Id: f_mn5xna9q0
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--00000000000088ab11064dd73a24--