From: raf <raf@raf.org>
To: pgsql-admin@postgresql.org
Subject: How to change the TLS certificate/key without restarting the server?
Date: Thu, 17 Oct 2019 16:20:42 +1100
Message-ID: <20191017052042.ombzxzwzo7xet47t@raf.org> (raw)
Hi,
https://www.postgresql.org/docs/12/ssl-tcp.html says:
"Using a passphrase also disables the ability to
change the server's SSL configuration without a
server restart."
How is key TLS key changed without a server restart?
Is replacing the server.crt/server.key files enough
or is there more to it?
And will existing connections continue to use the old
key until they disconnect?
cheers,
raf
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: raf@raf.org
Subject: Re: How to change the TLS certificate/key without restarting the server?
In-Reply-To: <20191017052042.ombzxzwzo7xet47t@raf.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox