ssl-params: Long-running ssl-params process shouldn't cause Dovecot restart to fail.

diff --git a/src/ssl-params/ssl-params.c b/src/ssl-params/ssl-params.c
index 996c25b6f3284906d5918dcc08089a1553b96c8d..b6849db23ce1075813db594c11fc90fb465a6a43 100644 (file)
--- a/src/ssl-params/ssl-params.c
+++ b/src/ssl-params/ssl-params.c
@@ -5,6 +5,7 @@
 #include "buffer.h"
 #include "file-lock.h"
 #include "read-full.h"
+#include "master-service.h"
 #include "master-service-settings.h"
 #include "ssl-params-settings.h"
 #include "ssl-params.h"
@@ -118,7 +119,9 @@ static void ssl_params_rebuild(struct ssl_params *param)
        case -1:
                i_fatal("fork() failed: %m");
        case 0:
-               /* child */
+               /* child - close listener fds so a long-running ssl-params
+                  doesn't cause Dovecot restart to fail */
+               master_service_stop_new_connections(master_service);
                ssl_params_if_unchanged(param->path, param->last_mtime);
                exit(0);
        default: