Is there any way to reload new certificates as well with restarting the tomcat services? The mail below explains the modification of certificates only considered and not the new ones. Our scenario is to load new certificates as well if the nssdb got changed dynamically.
Thanks & Regards, Raghavendran From: Ivano Luberti <lube...@archicoop.it.INVALID> Date: Monday, 26 September 2022 at 12:51 PM To: users@tomcat.apache.org <users@tomcat.apache.org> Subject: Re: certificate re-loading for apache tomcat without the apache restart Agree Here you can find documentation of what Peter says https://tomcat.apache.org/tomcat-10.0-doc/manager-howto.html#Reload_TLS_configuration using a call to the manager app. It doesn't take into account new certificates but only existing ones, because it dosn't reparse server.xml Il 26/09/2022 09:18, l...@kreuser.name ha scritto: > Raghavendran, > >> Am 26.09.2022 um 08:54 schrieb Ragavendhiran Bhiman >> (rabhiman)<rabhi...@cisco.com.INVALID>: >> >> Hi All, >> >> I have a scenario where I need to reload the certificates which are newly >> updated in the NSS DB without restarting the apache – tomcat. >> Is there any way to do it? >> >> Kindly share some piece of code to achieve the reloading of the certificates >> without restarting the apache tomcat service itself. >> >> > curl -u <user> -p <passw> > "https://myserver.mydomain/manager/jmxproxy?invoke=Catalina:type=ProtocolHandler,port=<connector > port>&op=reloadSslHostConfig&ps=<domain>" > > you need that <user> with at least roles="manager-jmx" in tomcat-users.xml > > >> Note : Trial from my side : Tried to restart the Apache connector, but still >> it is reloading the old certificates only and not the new certificates. >> If possible how to achieve the loading of the new one? >> >> >> Many Thanks for your help. >> >> Regards, >> >> Raghavendran >> > Hope this helps > > Peter -- Archimede Informatica tratta i dati personali in conformità a quanto stabilito dal Regolamento UE n. 2016/679 (GDPR) e dal D. Lgs. 30 giugno 2003 n. 196 per come modificato dal D.Lgs. 10 agosto 2018 n. 101. Informativa completa <http://www.archicoop.it/fileadmin/pdf/InformativaTrattamentoDatiPersonali.pdf> dott. Ivano Mario Luberti Archimede Informatica società cooperativa a r. l. Via Gereschi 36, 56127 Pisa tel.: +39 050/580959 | fax: +39 050/8932061 web: www.archicoop.it<http://www.archicoop.it> linkedin: www.linkedin.com/in/ivanoluberti<http://www.linkedin.com/in/ivanoluberti> facebook: www.facebook.com/archimedeinformaticapisa/<http://www.facebook.com/archimedeinformaticapisa/>
