Also reload SSL context on bip reload, allowing for SSL cert updates #16

Manually merged
bip merged 1 commits from Kyoshiro/bip:758_reload_ssl_certs_3 into master 2024-03-20 14:42:37 +01:00
1 changed files with 18 additions and 0 deletions

View File

@ -340,6 +340,24 @@ int main(int argc, char **argv)
/* re-open to allow logfile rotate */
log_file_setup();
#ifdef HAVE_LIBSSL
/*
* reload SSL context if server-side SSL is enabled and SSL files
* seem accessible.
*/
if (conf_css) {
if (check_ssl_files(SOFT_FAIL)) {
if (set_ssl_context(SSLCTX_FORCE_UPDATE) == 1)
mylog(LOG_DEBUG, "SSL context has been updated");
else
mylog(LOG_DEBUG, "SSL context has not been updated");
} else {
mylog(LOG_ERROR, "Unable to update SSL context, "
"file checks failed");
}
}
#endif
}
return 1;
}