Can I add a new crl after the server has started?

[Christian Tellnes]

Hello

I am using the crl option in the tls module. Is there any way I can
add a new crl without restarting the server?
The problem is that when the crl expires, I begin to get
CRL_HAS_EXPIRED error messages.

Thanks,
Christian

[Bradley Meck]

Have you looked into using the SNICallbck to do this? seems like it might add a bit of boilerplate, but looks to be possible

[Christian Tellnes]

It seems to work.

Thanks


--
Mvh. Christian Vaagland Tellnes
http://christian.tellnes.com/

[Christian Tellnes]

For reference, here is my implementation. Had I only managed to come
on a better name for the module.

https://github.com/tellnes/tls-cert-update