Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

On the fly certs - no connection drop, no reload #59

Open
jaysee opened this issue Jun 13, 2024 · 0 comments
Open

On the fly certs - no connection drop, no reload #59

jaysee opened this issue Jun 13, 2024 · 0 comments

Comments

@jaysee
Copy link

jaysee commented Jun 13, 2024

Is your feature request related to a problem? Please describe

One the fly 0 downtime/0 connection drop SSL cert generation.

Describe the solution you'd like

Actually it is not possible to generate on the fly certs so it makes the system depends of periodics or external url triggering.

You may be aware of lua's version ssl_certificate_by_lua that works on the fly.

I know one of the limitation is coming from njs that does not allow usage of async functions in js_set, blocking on the fly generation in acme.js_cert and acme.js_key, but have you discuss this situation with nginx/njs project to be able to provide something alike ssl_certificate_by_lua (basically a js_set with async allowed) ?

Describe alternatives you've considered

ssl_certificate_by_lua but I would prefer to stick on NJS as I already have usage of it and not of lua's mod.

Thanks for your work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant