Certificate lifetimes are continuing to decrease, eventually to 47 days: https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days
It is thus even more imperative that we be able to gracefully handled changing certificates while the BBS is running. The current cert reload process requires all server sessions be terminated due to the current way that the CA cert is reffed. This should be retooled to avoid that, so current sessions are unaffected.
Additionally, a nice feature would be an inotify watch on the certificate files so that a reload could occur as soon as the certificates are rotated by some other process (e.g. tooling around Let's Encrypt, etc.). Then, everything would just automatically work all the time.
You must be