RE: Reloading new certs for DNS over HTTPS

2021-09-09 Thread Richard T.A. Neal
On 9/9/21 06:35 PM, Grant wrote: >> I think the rndc reconfig should pick the new cert/key, but I am not >> sure if we have actually implemented this. > Drive by comment: > Should BIND /need/ to take any action for a /reconfig/ if it's configuration > hasn't change? -- To me the > configurati

Re: Reloading new certs for DNS over HTTPS

2021-09-09 Thread Grant Taylor via bind-users
On 9/9/21 10:29 AM, Ondřej Surý wrote: I think the rndc reconfig should pick the new cert/key, but I am not sure if we have actually implemented this. Drive by comment: Should BIND /need/ to take any action for a /reconfig/ if it's configuration hasn't change? -- To me the configuration is

Re: Reloading new certs for DNS over HTTPS

2021-09-09 Thread Ondřej Surý
Hi Eric, please create a GitLab issue for this. I think the rndc reconfig should pick the new cert/key, but I am not sure if we have actually implemented this. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply o

Reloading new certs for DNS over HTTPS

2021-09-09 Thread Eric Germann via bind-users
I’ve implemented DNS over HTTPS on two of my servers to get some experience. I’m using LetsEncrypt for the cert issuer. I ran in to an issue where it appears named only reads them on init. The cert expired and certbot faithfully renewed it, but was using the old cert it read at initialization