-
Notifications
You must be signed in to change notification settings - Fork 69
Open
Labels
Description
Is your feature request related to a problem? Please describe.
API ML loads the keystore and truststore during application startup. This works well in environments where certificates have a long lifetime (e.g., one year). However, certificate authorities are gradually reducing the validity period of issued certificates, with the new target being just 47 days. This would cause additional downtime of API ML. For example, see DigiCert’s schedule: https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days
Describe the solution you'd like
Allow API ML to dynamically reload private key and certificate from keyring/keystore.
Describe alternatives you've considered
Switch to full AT-TLS.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Icebox