Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-11-19 22:42:24 -05:00
Code Issues Projects Releases Packages Wiki Activity

cleanly phase in new TLS session ticket keys

Browse source 
This closes a small window where new workers could give keys not
accepted by the old workers before they're gracefully shut down. This
will also be needed when syncing keys across a cluster.
This commit is contained in:
Daniel Micay 2025-10-28 02:48:49 -04:00
parent 9ffcb3e648
commit 17f0ec527d
2 changed files with 7 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
create-session-ticket-keys
View file

@ -4,8 +4,8 @@ set -o errexit -o nounset -o pipefail
cd /etc/session-ticket-keys
for i in {1..4}; do
head -c 80 </dev/random >$i.key
for i in next.key {1..4}.key; do
head -c 80 </dev/random >$i
done
cat {1..4}.key > keys
cat next.key {1..4}.key > keys