Change MsQuicConfiguration without migration

[omegaelit]

Hi,

Is it possible to update MsQuicConfiguration dynamically without requiring client reconnections? I need to update server certificates on the fly. After some digging I discovered 2 potential solutions, but I'm not sure if they're the correct approaches:

1. Configuration changes can be applied to existing connections using migration. However, migration should be performed to a new port.
2. When my server has a new configuration, I must gracefully shutdown existing connections and wait for clients to reconnect
   Are these the only options, or is there a better way to handle certificate updates without service interruption? What's the recommended approach for hot-swapping certificates in MsQuic?

[nibanks]

With TLS 1.3, client certificates are only exchanged during the handshake, and once accepted they don't matter anymore. So, there is no way to change a certificate post-handshake. You can only use a different one for new connections.