Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a reload command #5

Open
Nothing4You opened this issue Aug 31, 2018 · 2 comments
Open

Add a reload command #5

Nothing4You opened this issue Aug 31, 2018 · 2 comments

Comments

@Nothing4You
Copy link

At least nginx does require a reload to refresh the staple file.
It'd be great if it was possible to specify a reload command that is executed when a staple file is updated.

@SnijderC
Copy link
Contributor

Hi,

We have a stapleadder.py module that does this for HAProxy since that is our own prime target, are you aware that nginx can do stapling on its own? There are some advantages to using a tool like this still and we could consider adding that functionality but we have no use for it. However, if you, or anyone would like contribute an additional module to cater for nginx reloading that would be great!

@Nothing4You
Copy link
Author

Yes, I am aware that nginx can do this on its own.
The issue however when using the builtin ocsp fetcher is that it can't do preloading.
When starting up nginx it won't load the ocsp staple until it receives the first request for the host. Once it receives this request it starts loading the staple in background and will continue to serve no staple until it has a cached staple. When the staple expires it won't be refreshed until another request is received, similar to initial startup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants