5:43 p.m.
Hi,
I'm playing with https://github.com/shred/acme4j, let's encrypt and
undertow. I made some progress but it is hard to test if the certificate
works without and real domain. I'm using ngrok but think there is a problem
there with HTTPS... not sure.
Anyway, I want to know if there is a way to dynamically renew the
certificate at runtime (no downtime).
Don't think is possible with existing API, is it?
Thanks
1:07 a.m.
It should be, although it would be a little bit of work. You need to
wrap the SSLContext (or rather implement OpenSSLContextSPI) to
delegate to a 'real' underlying context. When the certificate changes
you just build a new context and then change the one you are
delegating too, which means all new connections will use the new
context.
Stuart
On Wed, Sep 14, 2016 at 1:43 AM, Edgar Espina <espina.edgar(a)gmail.com> wrote:
Hi,
I'm playing with https://github.com/shred/acme4j, let's encrypt and
undertow. I made some progress but it is hard to test if the certificate
works without and real domain. I'm using ngrok but think there is a problem
there with HTTPS... not sure.
Anyway, I want to know if there is a way to dynamically renew the
certificate at runtime (no downtime).
Don't think is possible with existing API, is it?
Thanks
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
2775
days inactive
2775
days old
1 comments
2 participants
participants (2)
-
Edgar Espina -
Stuart Douglas