TSSslClientCertUpdate

Traffic Server TLS client cert update

Synopsis

#include <ts/ts.h>

TSReturnCode TSSslClientCertUpdate(const char *cert_path, const char *key_path)

Description

TSSslClientCertUpdate() updates existing client certificates configured in sni.yaml or proxy.config.ssl.client.cert.filename. cert_path must match the resolved certificate path used by Traffic Server. Relative certificate names in the configuration are resolved against proxy.config.ssl.client.cert.path. TSSslClientCertUpdate() returns TS_SUCCESS only if cert_path exists in the configuration and is reloaded into every matching context.

Any certificate data cached for cert_path and key_path is discarded as well, so client contexts that Traffic Server creates after the update also use the new certificate rather than the previously cached one.