Skip to content

On the fly certs - no connection drop, no reload #59

Open
@jaysee

Description

Is your feature request related to a problem? Please describe

One the fly 0 downtime/0 connection drop SSL cert generation.

Describe the solution you'd like

Actually it is not possible to generate on the fly certs so it makes the system depends of periodics or external url triggering.

You may be aware of lua's version ssl_certificate_by_lua that works on the fly.

I know one of the limitation is coming from njs that does not allow usage of async functions in js_set, blocking on the fly generation in acme.js_cert and acme.js_key, but have you discuss this situation with nginx/njs project to be able to provide something alike ssl_certificate_by_lua (basically a js_set with async allowed) ?

Describe alternatives you've considered

ssl_certificate_by_lua but I would prefer to stick on NJS as I already have usage of it and not of lua's mod.

Thanks for your work!

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions