tls: reload certs on REHASH (renewed cert applies without restart) and add per-hostname SNI via tls_sni

This commit is contained in:
Jean Chevronnet 2026-08-16 23:35:36 +00:00
parent a6293d5bbc
commit 471fc00dfc
4 changed files with 129 additions and 22 deletions

View file

@ -173,7 +173,7 @@ pub fn maybe_start(cfg: &Config, core: Sender<Event>, counter: Arc<AtomicU64>) {
if let Some(bind) = get("bind_wss").map(str::to_string) {
match (get("tls_cert"), get("tls_key")) {
(Some(cert), Some(key)) => match OpensslBackend::new(cert, key) {
(Some(cert), Some(key)) => match OpensslBackend::new(cert, key, Vec::new()) {
Ok(backend) => match TcpListener::bind(&bind) {
Ok(l) => {
eprintln!("echoircd WebSocket (wss) on {bind} (openssl)");