cmdmon: reload NTS server keys on rekey command

When ntsrotate is set to 0, allow the keys to be reloaded with the rekey
command of chronyc.
This commit is contained in:
Miroslav Lichvar
2020-04-15 11:52:49 +02:00
parent 85fa29c43d
commit 958d66f8a7
5 changed files with 23 additions and 1 deletions

View File

@@ -722,6 +722,19 @@ NKS_DumpKeys(void)
/* ================================================== */
void
NKS_ReloadKeys(void)
{
/* Don't load the keys if they are expected to be generated by this server
instance (i.e. they are already loaded) to not delay the next rotation */
if (key_rotation_interval > 0)
return;
load_keys();
}
/* ================================================== */
/* A server cookie consists of key ID, nonce, and encrypted C2S+S2C keys */
int