Re: Documentation for new DCM?

[Pete Helgren <pete@xxxxxxxxxx>]

Bouncing the instance is part of the process, although it is much more 
disruptive on IBM i.  Apache on Linux (and presumably in AIX/PASE) has 
an option called "graceful" which quietly terminates idle processes and 
restarts them so that current connections aren't disrupted.  So, in an 
automated LetsEncrypt ACME environment, the cert is renewed before it 
expires and then apachectl  graceful or systemctl reload httpd (or 
apache2) is issued depending on distro.  Much more humane...not sure why 
the option isn't there for HTTP Server for IBM i.  Maybe lack of 
thread/process support?  Don't know....

Jon I might work on some updated documentation on the new DCM this long 
weekend before my presentation fades in my memory (GREAT PowerUP 
conference in NOLA!)

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek  IBM_i_Geek

On 5/26/2022 3:07 PM, Jon Paris wrote:
> Well all now appears to be well.
>
> I did have to restart the server before any of the test sites saw the new cert so I guess the answer is that Apache does cache it - at least until it expires perhaps.
>
> Thanks to all for the help.
>
> Hopefully I can work with Pete to provide some simpler more comprehensible documentation.  IBM's stuff gets into the weeds so quickly and doesn't appear to document the simple normal tasks like just installing a replacement cert.
>
> The new DCM has some nice features, but too many of them are hidden in somewhat obscure places. Sometimes there's a menu option at the top of a page - other times you have to click in the bottom of a box to see the Add/Update/Delete type options. Horribly inconsistent - where is Dennis Schmidt when you need him!
>
>
> Jon P.