[Bug 55770] Allow the crlFile to be reloaded

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=55770

--- Comment #3 from Mark Thomas <ma...@apache.org> ---
The solution is to replace the SSLContext. That should be fairly simple for
JSSE. It is a little more 'interesting' for OpenSSL since you need to destroy
the SSLContext and you can't do that while it is in use but that should be a
solvable problem.

The advantage of this approach is you can reload the entire TLS config so it
can beused to update server certs, trust stores etc as well as CRL.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org