How to reload SSL certificate without restarting openresty?

manoaratefy

Good morning,

Currently I'm loading SSL certificate using ssl_certificate_by_lua_file to load SSL certificate. But I see that this directive is only called once on first https request, and then, its no more called.

So how can I force openresty to recall this directive in order to reload the SSL certificate without reloading the whole server?

Thanks in advance.

manoaratefy

Hello,

After digging deeper, I understand that this is because the browser is not making full SSL handshake. So, how to force browser to do full SSL handshake based on some LUA decisions?

zhuizhuhaomeng

what did you mean by not making full SSL handshake?
did you mean SSL resumption?

If you need a full SSL handshake every time, you need to disable the SSL resumption.(I don't think it is your need)

If you want to reload the certificated, you need to know your certificate file has been changed.