dsoumis commented on PR #1089: URL: https://github.com/apache/tomcat/pull/1089#issuecomment-6269056773
> Can you check for outdated certificates as well here? Perhaps choose the one with the longest remaining validity, or at least avoid any that have expired I also don't think we should skip expired certs. Client may use https://tomcat.apache.org/tomcat-11.0-doc/api/org/apache/catalina/security/TLSCertificateReloadListener.html to monitor the expiration dates of TLS certificates and trigger automatic reloading of the TLS configuration. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
