I'm running a MongoDB replica set with TLS/SSL. I'm also using a CRL to block revoked certificates for clients. Relevant configuration of a replica set member follows.
net: ssl: mode: requireSSL PEMKeyFile: /opt/member.pem clusterFile: /opt/member.pem CAFile: /opt/ca.pem CRLFile: /opt/crl.pem security: clusterAuthMode: x509
My question is: do I need to restart the
mongod process each time I update the CRL file on disk?