[Solved] Reload SSL Certificate without Restarting Lighttpd?
Added by exvance almost 13 years ago
Hi All,
In my use of Lighttpd I have a need to change the certificate on a regular basis. I'm wondering if it is possible to signal lighttpd to reload the certificate without dropping call current connections. I have seen other applications that you just call the executable with a specific parameter and it reloads without dropping stuff. Does Lighttpd have something like that?
Thanks,
EV
Replies (4)
RE: Reload SSL Certificate without Restarting Lighttpd? - Added by exvance almost 13 years ago
Looks like I'm out of luck...
" - a light and fast webserver\n" \
"usage:\n" \
" -f <name> filename of the config-file\n" \
" -m <name> module directory (default: "LIBRARY_DIR")\n" \
" -p print the parsed config-file in internal form, and exit\n" \
" -t test the config-file, and exit\n" \
" -D don't go to background (default: go to background)\n" \
" -v show version\n" \
" -V show compile-time features\n" \
" -h show this help\n" \
Is there any reason this feature can't be added?
I would just need it to reload the PEM file...not the CA File.
Maybe I'll look at the code a bit to try to figure out how to do it.
RE: Reload SSL Certificate without Restarting Lighttpd? - Added by stokito 10 months ago
You can call `systemctl reload lighttpd` or send a SIGUSR1 signal to a process for a graceful restart.
RE: Reload SSL Certificate without Restarting Lighttpd? - Added by gstrauss 10 months ago
@stokito, the original post is from almost 12 years ago.
lighttpd added graceful restart with SIGUSR1 7 years ago in lighttpd 1.4.46 in #2785
RE: Reload SSL Certificate without Restarting Lighttpd? - Added by gstrauss about 1 month ago
The next version of lighttpd (lighttpd 1.4.78) will include new options (disabled by default) for reloading certificate files and certificate revocation lists (CRLs) which have changed on disk.
See server.feature-flags "ssl.refresh-certs" and "server.refresh-crls"
The code for these new options is on my development branch (https://git.lighttpd.net/lighttpd/lighttpd1.4/src/branch/personal/gstrauss/master/) and currently checks each 64 seconds to see if the certificate files have been modified.