Re: How postgres is refreshing TLS certificates

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: M Tarkeshwar Rao <m(dot)tarkeshwar(dot)rao(at)ericsson(dot)com>
Cc: "'pgsql-general(at)postgresql(dot)org'" <pgsql-general(at)postgresql(dot)org>, Kirti Dhar Upadhyay K <kirti(dot)k(dot)dhar(dot)upadhyay(at)ericsson(dot)com>
Subject: Re: How postgres is refreshing TLS certificates
Date: 2021-07-29 06:38:26
Message-ID: YQJM4hXdLcmp6hhq@paquier.xyz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Wed, Jul 28, 2021 at 06:51:22AM +0000, M Tarkeshwar Rao wrote:
> We are working on a activity in which I need to refresh the TLS
> certificate without restarting the my application pod.
> This feature is already there in Postgres. Can anyone please suggest
> us how postgres is implemented the same?

Hard to answer with so little detail, but if you are referring to the
backend server, aren't you looking for the fact that SSL contexts and
its surrounding applications can be reloaded? That would apply after
a simple pg_ctl "reload" for example.
--
Michael

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Lucas 2021-07-29 07:09:39 Low cache hit ratio
Previous Message Bhavesh Mistry 2021-07-28 21:31:38 Issue with PSQL JDBC Driver Null Pointer