"Online" Updating of OpenSSL

[Florian Heigl]

Hi,

I suppose we pretty much all went through some updates since April.
So far, I have been rebooting the affected systems during the OpenSSL updates to make sure the services are all properly restarted.


I’d like to switch to some kind of restarting only the affected services, as that would minimize the downtimes from minutes to seconds.

But how do you identify the affected applications and relate them to scripts in /etc/rc.d /usr/local/etc/rc.d ?

How are you guys handling it?

- Identifying what’s really linked to openssl / gnutls / whatever
- Restarting gracefully at the right time

Greetings,
Florian