Probably this part has to be reviewed ... first the tls reload was initially designed to
be done rather rarely, when the certificates expires. The CRL feature was also not much in
use, at least in what I could experience so far, most of the deployments are with
server-side only certificates.
Furthermore, I am not sure if old certificates can be cleared right away after the
restart, existing connections are not closed and there might be some references to their
certificates.
Are you doing the reload only if there are changes in the content of the crl or
certificate files? Or the reload is done anyhow?
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3823#issuecomment-2097673385
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/3823/2097673385(a)github.com>