Re: [sr-dev] git:andrei/tcp_tls_changes: tls: migrated to the runtime cfg framework

On May 28, 2010 at 15:10, Klaus Darilion klaus.mailinglists@pernau.at wrote:

Am 28.05.2010 13:44, schrieb Andrei Pelinescu-Onciul:

...

config - can be changed at runtime and if followed by a
         tls.realod, the configuration from the new file will
         be loaded.

Andrei, the module README still states:

...

TLS specific config reloading is not safe, so for now better don't use it, especially under heavy traffic.

Is this still the case?

Yes, there is a race condition when loading the config. It's very hard to trigger (since the tls domain configs are kept around for some time in an attempt to avoid this race) and probably if you don't continuously reload the config while having very heavy tls traffic and some swapping you'll never be able to trigger it.

Anyway it should be fixed (transformed into something race-free, similar with the runtime changes in the cfg framework).

Andrei