You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2017/09/26 15:27:25 UTC

[Bug 61565] New: Manager interface for reloading TLS config

https://bz.apache.org/bugzilla/show_bug.cgi?id=61565

            Bug ID: 61565
           Summary: Manager interface for reloading TLS config
           Product: Tomcat 9
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Manager
          Assignee: dev@tomcat.apache.org
          Reporter: apache@gagravarr.org
  Target Milestone: -----

For an installation of Tomcat with JMX turned off, it would be nice to have an
alternate way to request a graceful reload of the TLS configuration (eg for a
renewed certificate)

Having an option in the Manager seems a good way to permit this for
admins-only, with no JMX

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 61565] Manager interface for reloading TLS config

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=61565

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from Mark Thomas <ma...@apache.org> ---
I was working on this just before I went on PTO for the holiday period. Looks
like I forgot to resolve this once I committed the feature. Sorry for any
confusion.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 61565] Manager interface for reloading TLS config

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=61565

--- Comment #4 from Mark Thomas <ma...@apache.org> ---
Added to 8.5.x for 8.5.32 onwards.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 61565] Manager interface for reloading TLS config

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=61565

--- Comment #2 from Remy Maucherat <re...@apache.org> ---
Mark did it in r1818127 although I didn't test it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


[Bug 61565] Manager interface for reloading TLS config

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=61565

--- Comment #1 from Christopher Schultz <ch...@christopherschultz.net> ---
Since Tomcat 8.5.24 and similar Tomcat 9.0.x, the endpoint class contains these
new methods:

reloadSslHostConfig(String hostName)
reloadSslHostConfigs()

[ref:
https://lists.apache.org/thread.html/79f8d5201990b57fc781c6e40730888934b3d57ce7bd7509720ef8e2@%3Cusers.tomcat.apache.org%3E]

It seems this makes this enhancement much easier to accomplish, though there
may not be a natural place to show such an operation (e.g. the "endpoints"
aren't shown on the manager page).

Where were you thinking you'd like these "reload TLS config" options to be
offered?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org