Support for symlinks
Posted: Sat Oct 09, 2021 7:00 am
I have certbot (let's encrypt) installed to provide updated SSL certificates on a periodic basis.
This all works quite well except that the "live" folder is a symlink to a specific versioned file in the "archive" folder.
In the mavens admin console, selecting the symlink file them immediate displays the linked file. The problem is that this file could change when certbot determines the SSL certificate is nearing renewal. As a result if left unnoticed, the mavens client is still pointing to the out of date certificate and any users are given a nasty warning page in the browser.
A small complication would be that the certificate files may change at these random times and the server service would need to know to reload them on an occasional basis (ideally without having to restart the client).
The three fileds affected are SSL key file, SSL certificate file and SSL root certificate file.
This all works quite well except that the "live" folder is a symlink to a specific versioned file in the "archive" folder.
In the mavens admin console, selecting the symlink file them immediate displays the linked file. The problem is that this file could change when certbot determines the SSL certificate is nearing renewal. As a result if left unnoticed, the mavens client is still pointing to the out of date certificate and any users are given a nasty warning page in the browser.
A small complication would be that the certificate files may change at these random times and the server service would need to know to reload them on an occasional basis (ideally without having to restart the client).
The three fileds affected are SSL key file, SSL certificate file and SSL root certificate file.