* Magnus Hagander (magnus(at)hagander(dot)net) wrote:
> That's certainly an issue. Potentially bigger ones are that you cannot
> replace an expired certificate or CRL without a restart.
+100. I had forgotten about that issue- but it definitely sucks. :(
> Some of this is going to have to be at least partially reworked anyway
> in the work that Heikki has been diong to support non-openssl
> libraries. Making a change like this at the same time is probably a
> good idea.
Agreed.
Thanks,
Stephen