v.24.11Improvement

Added client certificate reload capability similar to server certificates

Official CH changelog text
Added the ability to reload client certificates in the same way as the procedure for reloading server certificates. #70997 (Roman Antonov).
Added support for reloading client TLS certificates dynamically, similar to the existing mechanism for reloading server certificates.

Why it matters

This feature enables users to update client TLS certificates without restarting the ClickHouse server, improving operational flexibility and reducing downtime when managing security credentials.

How to use it

Users can reload client certificates using the same reload procedure applied for server certificates, typically by invoking the system reload tls command or sending a SIGHUP signal to the ClickHouse server process.

Related resources

PreviousNext