CRLs need to be easily reloadable

[ralight]

migrated from Bugzilla #465345
status NEW severity normal in component Mosquitto for 1.4
Reported in version 1.4 on platform PC
Assigned to: Roger Light

Original attachment names and IDs:

• 0007-Add-code-for-auto-reloading-CRLs-on-modification.patch (ID 256235)

On 2015-04-23 17:14:09 -0400, Roger Light wrote:

Reported on the mailing list:

http:https://dev.eclipse.org/mhonarc/lists/mosquitto-dev/msg00601.html

At the moment CRLs can only be reloaded by restarting the broker.

On 2015-08-30 06:40:20 -0400, Benajmin Berg wrote:

Created attachment 256235
patch implementing periodic crl reloading

This is a patch that has been working for me for a while now. It probably still has some rough edges, but might be helpful for anyone who wants to get CRL reload support merged.

[gebi]

any news on this?
This would be a really handy feature.

[ecsv]

Just went through Benjamin's old repositories and this is the last version. Seems to be for mosquitto 1.4.10 and openssl 1.1.0j. 0007-Add-code-for-auto-reloading-CRLs-on-modification.patch.gz

But the thing is only in a POC stage. It is most likely better to get OCSP working instead.