Files
releases/test/e2e/certrefresh/testdata/ca.pem
T
Stephan Renatus cc4816eded server+runtime: add TLS cert refreshing (#4107)
This adds a new flag to `opa run`, intended for server usage with HTTPS listeners:
`--tls-cert-refresh-period`. If used with a positive duration, such as "5m" (5 minutes),
"24h", etc, the server will track the certificate and key files' contents. When their
content changes, the certificates will be reloaded.

On an error in reloading, it will log (info) the error and try again in the next round.

Fixes #2500.

Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>
2021-12-09 10:13:14 +01:00

20 lines
1.1 KiB
Plaintext

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----