Currently, if we create a long-running client backed by TS-transport against a short-lived cert, there's no clear mechanism to ensure that the client picks up a new cert once the initial one expires. POSIX-backed transport solves this with CertificateReloader, TS should either implement something similar or give the callers the ability to pass a closure for sec_protocol_options_set_challenge_block.
Currently, if we create a long-running client backed by TS-transport against a short-lived cert, there's no clear mechanism to ensure that the client picks up a new cert once the initial one expires. POSIX-backed transport solves this with
CertificateReloader, TS should either implement something similar or give the callers the ability to pass a closure forsec_protocol_options_set_challenge_block.