How to update TLS certificates?

[zuiderkwast]

When renewing TLS certificates, can I just replace the certificate files and they're reloaded automatically, or do I need to trigger the reloading in some way?

The source code suggests CONFIG SET of any of the TLS configs reinitializes the libssl context, if I read correctly. Can I just set a config to the same value as the current value and then Valkey reloads the key, cert, and ca-cert files? It's not documented AFAICT, at least not on this page: https://valkey.io/topics/encryption/

[madolson]

What you described should just work. You need to do CONFIG SET with the key, cert, and whatever other parameters you are providing so it loads it as a group. CONFIG SET typically doesn't trigger if the same value is passed in as the current value, but the TLS configs have a special flag so it always tries to reload the configuration.

[zuiderkwast]

Thx, let's put this in the docs.