Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-3197

Ability to refresh SSL certificates without MaxScale restart

Details

    • New Feature
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Duplicate
    • None
    • N/A
    • N/A
    • None

    Description

      Currently there is no way in MaxScale to refresh ssl certificates with new ones. In MariaDB, whenever a new ssl certificate is refreshed, we can just issue a flush ssl command, and this will take care of it.
      In order for MaxScale to be updated with the new certs, a service restart of maxscale is required.
      I did some investigation and found this capability was added to MariaDB at the end of 2018. Could this same concept be implemented in MaxScale?

      Here's the MariaDB feature request for this same issue, which has already been addressed and it works.

      Attachments

        Issue Links

          duplicates

          New Feature - A new feature of the product, which has yet to be developed. MXS-3128 Cannot refresh SSL Certificates without a restart

          • Major - Major loss of function.
          • Closed
          relates to

          Task - A task that needs to be done. MDEV-16266 Ability to Refresh SSL Cert / CRL Without Server Restart

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            movistagreg Greg Smith added a comment -

            Now that Apple has required a 1 year life to certificates, we will have to start updating our ssl certs with more regularity. It would be best if MaxScale had the same functionality as MariaDB that would allow you to update/refresh the SSL certificates from maxctrl without having to restart the service.

            movistagreg Greg Smith added a comment - Now that Apple has required a 1 year life to certificates, we will have to start updating our ssl certs with more regularity. It would be best if MaxScale had the same functionality as MariaDB that would allow you to update/refresh the SSL certificates from maxctrl without having to restart the service.
            markus makela markus makela added a comment -

            Duplicate of MXS-3128.

            markus makela markus makela added a comment - Duplicate of MXS-3128 .

            People

              Unassigned Unassigned
              dalmeida Daniel Almeida (Inactive)
              Votes:
              5 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.