STeve (Xin) Huang

@nklaassen it wasn't backported because I wasn't confident of the change since we don't have an account to test. so it was kept on master. I don't know if any...

> Is it going to be possible to make a running proxy use a new set of certs? This would let us not interrupt any connections that were already established...

> @greedy52 Understood, so it sounds like we'll have to continue to restart the proxy after relogin, right? Yes. That would be the simplest.

@ravicious sorry for the delay. I was prototyping this last week but realized a slight problem with this plan. For `tsh proxy db` without the `--tunnel` mode, the certs are...

@ravicious i was thinking about the extra trigger-when-cert-expired goroutine can set `Gateway` in a special state say `closed` where alpn local proxy is closed but other information like database and...

@ravicious here is a draft for the callback and an example using it for `tsh proxy db`. If it works out for you, I can "productize" this change. I do...

I run into a similar issue with `tsh s3 ls s3:// --region ` where the region is the WRONG region where the bucket is located. The command gives back 500...

closed by #16958

What happens when the user connects two different sessions to two separate database names (for the same database service)? Mostly worried about not cleaning up the permissions

> > What happens when the user connects two different sessions to two separate database names (for the same database service)? Mostly worried about not cleaning up the permissions >...