Hello, I am using Ory Hydra in my application. Cur...
# general
b
Hello, I am using Ory Hydra in my application. Currently, the TLS certificate and key can be provided either as file paths or as base64-encoded content in the Ory Hydra configuration file. Is there a way to supply the TLS certificate and key via the command-line interface, either as file paths or base64 content?
s
b
But I want to set the configuration temporarily, because from UI users can change the configuration
s
That's not possible in self hosted.
But all config files are hot-reloaded
Did you find a solution? I don't quite get the problem you are trying to solve, maybe you can expand on that so we can help better.
b
In our application, we initially generate a default TLS certificate and store it in memory to establish a secure TLS connection with Ory Hydra. Once the client uploads their own TLS certificate, we save it to the file system and use that certificate for all subsequent connections.
s
You should be able to just update the config file. Probably the better option though would be to do TLS termination in a dedicated component (potentially your WAF), as that would be more flexible especially when you scale Hydra.