On Thu, Dec 15, 2011 at 8:36 PM, John Abloyer <johnabloyer@gmail.com> wrote:

Hi, Is there a way to reload CRL, or actually change to a newer, *without* restarting stunnel?

Hi, yes as of stunnel 4.32 (or around there) you can send the process a HUP signal and it will reload the config including the CRL without breaking any connections. The one thing it won't do is disconnect anybody that has suddenly become invalid as a result of the new CRL. For that a restart is required. Cheers Dave