adding new trust certificates to a running SSL Server (dynamically)
843811Apr 18 2007 — edited Aug 21 2008I have an SSL Server i wrote that uses a serverTrust keystore. I create the SSLContext and initialize it with my TrustManager and KeyManager arrays. What I noticed is that now I have an SSL Context that is bound to the serverTrust keystore I used to create the TrustManager. This Context then will beget an SSLServerSocketFactory which will then beget an SSLServerSocket that I accept connections from.
We have a desire to add new trust certificates to the system dynamically. I wrote a little monitor thread that watches a directory for incoming new certs and then opens the serverTrust keystore and adds them in. So I have 1 part of it down. However it seems I need to restart before the addition is reflected in the server.
I would rather not affect a server restart just to add a new trust certificate. But it seems that I have to in order for the Context to get updated.
So my question boils down is what I want to do possible or has it been done before?
Any and all suggestions welcomed.
thanks
Doug Lochart