Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
by jimjag on Monday February 22, 2016 @03:06PM
(#11153846)
From what I can see, Caddy also does a reload. With Apache, you can do a Graceful restart and not lose any traffic, plus, using mod_lua you could create a relatively easy way to add this automagically.
[ Parent
| on HN ]
Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
by pilif on Monday February 22, 2016 @03:24PM
(#11153990)
nginx you can also reload gracefully using the same mechanism. Still. It would be cool if it wasn't needed. I mean - you don't normally restart web servers when a file in the document root changes - why would you still have to do this for changes to SSL certs.
(note: I know that these are two very different things and I know how complicated it is to get all that state correct and to properly re-initialize the SSL context - still, as certificates get more and more short-lived, this would be a cool thing to have)