Hi Tomas,

As part of JIRA QPID-8306 [1] I added a support to update port TLS layer
(for both AMQP and HTTP ports).
Invocation of operation "updateTLS" allows to refresh SSLContext objects on
the port without affecting existing connections.
Thus, when you update keystore/truststore or change port TLS settings (like
keystore/truststore, wanted/needed, etc), you can invoke "updateTLS" to
apply those changes without broker restart.
You can test the implemented functionality by building broker from master.

Is it something you are looking for?

Potentially, I can push those changes into 7.1 if required.
We can move this functionality further to allow dynamically switching port
transport from plain TCP to TLS and back if needed.

If you have other suggestions please feel free to raise JIRA.

Kind Regards,
Alex

[1] https://issues.apache.org/jira/browse/QPID-8306


On Wed, 24 Jul 2019 at 13:31, .. ... <[email protected]> wrote:

> Hi,
>
> is there any possibility to reload keystore or truststore of FileKeyStore
> type REST API?
>
>
> It looks like the only option to reload keystore/truststore is restart of
> broker. Reload feature could be helpful when keystore/truststore file is
> updated and broker couldn't be restarted.
>
>
> I found similar feature regarding reloading ACL, but I cannot find any API
> for reloading FileKeyStore.
>
>
> Regards,
>
> Tomas
>

Reply via email to