Skip to content

Commit 4abe088

Browse files
Update modules/ROOT/pages/security/ssl-framework.adoc
Co-authored-by: NataliaIvakina <[email protected]>
1 parent c03941f commit 4abe088

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1143,7 +1143,9 @@ New certificates need to be copied to all cluster members as required.
11431143
dbms.security.reloadTLS()
11441144
----
11451145
1146-
. New settings will take effect immediately, however existing connections will not be pre-emptively terminated.
1146+
. New settings will take effect immediately; however, existing connections will not be preemptively terminated.
1147+
This means that while new connections will use new certificates, the existing connections (established before the update) will continue using the old certificates.
1148+
Even if a certificate expires, active connections remain unaffected because the certificates are only used during the initial connection handshake.
11471149
11481150
. Verify that the intra-cluster communication is still encrypted using external tooling, such as Nmap, described in <<ssl-cluster-config, Configuring SSL for intra-cluster communications>>.
11491151

0 commit comments

Comments
 (0)