How to enable sslAutoReload for console?

[doxsch]

I am currently securing the endpoints and acceptors with SSL certificates.

How can it be configured so that the certificates are updated without a restart?

[brusdev]

The auto reload of the acceptor certificates can be enabled by using the the broker properties and the auto reload of the console certificates can be enabled by using the webconfig system properties, i.e.

apiVersion: broker.amq.io/v1beta1
kind: ActiveMQArtemis
metadata:
  name: artemis-console
spec:
  acceptors:
    - name: my-acceptor
      port: 61626
      sslEnabled: true
      sslSecret: my-tls-secret
  console:
    expose: true
    sslEnabled: true
    sslSecret: my-tls-secret
  brokerProperties:
    - "acceptorConfigurations.my-acceptor.params.sslAutoReload=true"
  env:
    - name: JAVA_ARGS_APPEND
      value: -Dwebconfig.bindings.artemis.sslAutoReload=true

[doxsch]

Thank you for your quick response. I will try that.

[doxsch]

Edit: The console reloading did not work for me. But I think it is a bug with symlinked secrets in the artemis code itself. I opened a bug report.

https://issues.apache.org/jira/browse/ARTEMIS-5116

[brusdev]

@doxsch thanks for sharing your progress

[brusdev]

@doxsch my fix for ARTEMIS-5116 was merged and will be included in Apache ActiveMQ Artemis 2.39.0

[doxsch]

@brusdev Thank you very much for the great news and your effort.