lxd/endpoints/network.go
func (e *Endpoints) NetworkUpdateCert(cert *shared.CertInfo) {
	e.mu.Lock()
	defer e.mu.Unlock()
	e.cert = cert
	listener, ok := e.listeners[network]
	if !ok {
		return
	}
	listener.(*networkListener).Config(cert)

	// Update the cluster listener too, if enabled.
	listener, ok = e.listeners[cluster]
	if !ok {
		return
	}
	listener.(*networkListener).Config(cert)
}
func (e *Endpoints) NetworkUpdateCert(cert *shared.CertInfo) {
	e.mu.Lock()
	defer e.mu.Unlock()
	e.cert = cert
	listener, ok := e.listeners[network]
	if !ok {
		return
	}
	listener.(*networkListener).Config(cert)

	// Update the cluster listener too, if enabled.
	listener, ok = e.listeners[cluster]
	if !ok {
		return
	}
	listener.(*networkListener).Config(cert)
}
// NetworkUpdateCert updates the TLS keypair and CA used by the network
// endpoint.
//
// If the network endpoint is active, in-flight requests will continue using
// the old certificate, and only new requests will use the new one.