tree 19814695e47cec1f2aca73b589af7674e4e77603
parent 555b84506e22ecd5bc5cea0f2d3dcae3a1d8c108
author Giang Nguyen <cauthu@dropbox.com> 1509376757 -0500
committer Giang Nguyen <cauthu@dropbox.com> 1511219396 +0000

Add Python support for server SSL cert reloading

Previously, a secure server is configured with SSL credentials during
initialization, and those credentials will be used for the lifetime of
the server. If the user wants the server to use new credentials, the
user has to restart the server, resulting in server downtime. This
change enables the user to optionally configure the server with a
"certificiate config fetcher," such that on every new client
connection, the server will call the config fetcher before performing
the handshake, allowing the user application to optionally specify new
certificate configuration for the server to use (the fetcher can
return a "no change" and the server continues to use its current
certificate configuration).