| From: | Tatsuo Ishii <ishii(at)postgresql(dot)org> |
|---|---|
| To: | bob(dot)ross(dot)19821(at)gmail(dot)com |
| Cc: | pgpool-hackers(at)lists(dot)postgresql(dot)org |
| Subject: | Re: Rotate SSL certificates on reload (SIGHUP) without restart |
| Date: | 2026-03-19 10:22:25 |
| Message-ID: | 20260319.192225.349123033503761335.ishii@postgresql.org |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgpool-hackers |
Hi Bob,
> Hi Tatsuo,
>
> Have there been any further considerations regarding changes to the pgPool
> codebase to support SSL certificate rotation on reload?
>
> As DigiCert has announced last year (
> https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days)
> TLS/SSL certificate lifetimes will be reduced progressively in the coming
> years, with the industry moving toward much shorter validity periods. This
> makes the current requirement to fully restart the service for certificate
> renewal increasingly impractical.
>
> Please let us know whether this enhancement is being considered, or if
> there are any plans or timelines for addressing it.
I just have too many things to do for now (fixing bugs and evaluating
proposed patches), and I cannot estimate timelines for this. Plus, I
am not super familiar with this are (SSL). If you could provide
patches for this, it would greatly help me.
Best regards,
--
Tatsuo Ishii
SRA OSS K.K.
English: http://www.sraoss.co.jp/index_en/
Japanese:http://www.sraoss.co.jp
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tatsuo Ishii | 2026-03-20 02:53:54 | pool_search_relcach does not consider session local cache case |
| Previous Message | Tatsuo Ishii | 2026-03-19 06:37:04 | Re: Lock release leak in pool_search_relcache |