Agree

Here you can find documentation of what Peter says

https://tomcat.apache.org/tomcat-10.0-doc/manager-howto.html#Reload_TLS_configuration

using  a call to the manager app.

It doesn't take into account new certificates but only existing ones, because it dosn't reparse server.xml

Il 26/09/2022 09:18, l...@kreuser.name ha scritto:
Raghavendran,

Am 26.09.2022 um 08:54 schrieb Ragavendhiran Bhiman 
(rabhiman)<rabhi...@cisco.com.INVALID>:

Hi All,

I have a scenario where I need to reload the certificates which are newly 
updated in the NSS DB without restarting the apache – tomcat.
Is there any way to do it?

Kindly share some piece of code to achieve the reloading of the certificates 
without restarting the apache tomcat service itself.


curl -u <user> -p <passw> 
"https://myserver.mydomain/manager/jmxproxy?invoke=Catalina:type=ProtocolHandler,port=<connector 
port>&op=reloadSslHostConfig&ps=<domain>"

you need that <user> with at least roles="manager-jmx" in tomcat-users.xml


Note : Trial from my side : Tried to restart the Apache connector, but still it 
is reloading the old certificates only and not the new certificates.
If possible how to achieve the loading of the new one?


Many Thanks for your help.

Regards,

Raghavendran

Hope this helps

Peter
--

Archimede Informatica tratta i dati personali in conformità a quanto
stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 2003 n. 196
per come modificato dal D.Lgs. 10 agosto 2018 n. 101.
Informativa completa <http://www.archicoop.it/fileadmin/pdf/InformativaTrattamentoDatiPersonali.pdf>

dott. Ivano Mario Luberti

Archimede Informatica società cooperativa a r. l.
Via Gereschi 36, 56127 Pisa

tel.: +39 050/580959 | fax: +39 050/8932061

web: www.archicoop.it
linkedin: www.linkedin.com/in/ivanoluberti
facebook: www.facebook.com/archimedeinformaticapisa/

Reply via email to