Skip to content

Reload keystore/truststore during runtime #4316

@achmelo

Description

@achmelo

Is your feature request related to a problem? Please describe.
API ML loads the keystore and truststore during application startup. This works well in environments where certificates have a long lifetime (e.g., one year). However, certificate authorities are gradually reducing the validity period of issued certificates, with the new target being just 47 days. This would cause additional downtime of API ML. For example, see DigiCert’s schedule: https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days

Describe the solution you'd like
Allow API ML to dynamically reload private key and certificate from keyring/keystore.

Describe alternatives you've considered
Switch to full AT-TLS.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    Icebox

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions