alkanvpn Hi all, I have a use-case where the server certificate and key need to change more frequent than usual. Is there any way to "soft-reload" an openvpn server service to reread the certificate without dropping the existing connections? As far as I read from the documentation, the SIGUSR1 signal wouldnt close/reopen the tun/tap interface but do you think it would do the trick? Thanks and merry Christmas!
alkanvpn that bad? I thought I could work something out ;( If I were to write a patch, do you think it would be difficult to read the cert into memory and use it for new connections while maintaining the old connections on the old cert?
Pippin You can first discus this on the developers mailing list. Subscribe here: https://sourceforge.net/projects/openvpn/lists/openvpn-devel
alkanvpn Pippin wrote You can first discus this on the developers mailing list. Subscribe here: https://sourceforge.net/projects/openvpn/lists/openvpn-devel Thanks!