d-Rickyy-b / certstream-server-go

This project aims to be a drop-in replacement for the certstream server by Calidog. This tool aggregates, parses, and streams certificate data from multiple certificate transparency logs via websocket connections to the clients.
MIT License
88 stars 8 forks source link

Implement TLS cert rotation #11

Open d-Rickyy-b opened 1 year ago

d-Rickyy-b commented 1 year ago

Currently changing a cert requires the server to be restarted. That's obviously quite uncool. Nobody wants downtimes for cert updates.

Here are a few resources that explain how to fix this issue: https://betterprogramming.pub/hitless-tls-certificate-rotation-in-go-8f24a26ec267 https://opensource.com/article/22/9/dynamically-update-tls-certificates-golang-server-no-downtime https://stackoverflow.com/questions/37473201/is-there-a-way-to-update-the-tls-certificates-in-a-net-http-server-without-any-d