Hot reload of server certificate

[krockpot]

For some use cases, the certificate configured on the host may be short lived and rotated regularly. Rather than restart notary, it makes sense for it to regularly update its certificate information based on what is at the configured path.

[GordonTheTurtle]

Please sign your commits following these rules:
https://github.com/moby/moby/blob/master/CONTRIBUTING.md#sign-your-work
The easiest way to do this is to amend the last commit:

$ git clone -b "certificate_rotation" git@github.com:krockpot/notary.git somewhere
$ cd somewhere
$ git commit --amend -s --no-edit
$ git push -f

Amending updates the existing PR. You DO NOT need to open a new one.

[docker-jenkins]

Can one of the admins verify this patch?

[endophage]

Apologies for letting this languish. LGTM.

cc @justincormack @cyli

[endophage]

Noticed the dco/no tag is still one here. Please make sure all commits in this PR have the Signed off by line. This will block merging.

[krockpot]

ah yeah I think that's because I used the update branch button in the UI. rebased manually.

[krockpot]

Unclear why CircleCI was waiting, so I'll just rebase from master again 🤷‍♂️

[krockpot]

@endophage @justincormack should be good to merge (had to do a few rebases), I don't have perms to merge.

[krockpot]

sorry to spam but @cyli @endophage @justincormack any other actions before this can be merged? Thanks!

[krockpot]

Just wanted to follow up again and see if there is any official process to have this PR merged now that it's been accepted. Thanks! (@endophage)

[marcofranssen]

Please sign your commits following these rules:
https://github.com/moby/moby/blob/master/CONTRIBUTING.md#sign-your-work
The easiest way to do this is to amend the last commit:

$ git clone -b "certificate_rotation" git@github.com:krockpot/notary.git somewhere
$ cd somewhere
$ git commit --amend -s --no-edit
$ git push -f

Amending updates the existing PR. You DO NOT need to open a new one.

https://marcofranssen.nl/secure-2fa-ssh-and-pgp-using-krypton/#PGP-setup Here is also a guide which eases howto setup your GPG key