Will radiusd reload certificates on hup command?
Assuming that the FreeRADIUS configuration files have changed, will the hup command make the server reload its certificates, keys, etc.? Thanks.
On 18 Sep 2023, at 04:44, James Fan <polysorb@gmail.com> wrote:
Assuming that the FreeRADIUS configuration files have changed, will
the hup command make the server reload its certificates, keys, etc.? Thanks.
No, that requires a restart. But it’s very easy for you to test it.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Okay, but I am curious about the below setting. Is that only reloading the CRLs? Because I can't see any reload while updating the certificates. Or do I need to comment on the ca_file setting? Thanks. # Flush ca_path each hour ca_path_reload_interval = 3600 Kristofer Hallin <kristofer@sunet.se> 於 2023年9月18日 週一 下午2:35寫道： > > > > On 18 Sep 2023, at 04:44, James Fan <polysorb@gmail.com> wrote: > > > > Assuming that the FreeRADIUS configuration files have changed, will > > > > the hup command make the server reload its certificates, keys, etc.? > Thanks. > > No, that requires a restart. But it’s very easy for you to test it. > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >
On Sep 18, 2023, at 9:05 PM, James Fan <polysorb@gmail.com> wrote:
Okay, but I am curious about the below setting. Is that only reloading the CRLs?
The "ca_path_reload_interval" configuration item controls how often the CAs are reloaded. It doesn't reload the CAs.
Because I can't see any reload while updating the certificates.
It doesn't log when it reloads the certificates. It just uses the new certificates for new TLS sessions. Alan DeKok.
Okay, so if I want to hot-reload the CA certificates, what can I do against restarting the radius server? Thanks. Alan DeKok <aland@deployingradius.com> 於 2023年9月19日 週二 下午8:19寫道：
On Sep 18, 2023, at 9:05 PM, James Fan <polysorb@gmail.com> wrote:
Okay, but I am curious about the below setting. Is that only reloading
the
CRLs?
The "ca_path_reload_interval" configuration item controls how often the CAs are reloaded. It doesn't reload the CAs.
Because I can't see any reload while updating the certificates.
It doesn't log when it reloads the certificates. It just uses the new certificates for new TLS sessions.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
James Fan -
Kristofer Hallin