From 9865ae859c7fbc0d0e580d24028742bff1a13b96 Mon Sep 17 00:00:00 2001
From: Darren Shepherd <darren@rancher.com>
Date: Wed, 16 Jun 2021 00:59:59 -0700
Subject: [PATCH] Don't reset connections on the first load of the certs

---
 listener.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/listener.go b/listener.go
index a67a932..bd310ee 100644
--- a/listener.go
+++ b/listener.go
@@ -370,7 +370,7 @@ func (l *listener) loadCert() (*tls.Certificate, error) {
 	}
 
 	// cert has changed, close closeWrapper wrapped connections if this isn't the first load
-	if l.conns != nil && l.cert == nil {
+	if l.conns != nil && l.cert != nil {
 		l.connLock.Lock()
 		for _, conn := range l.conns {
 			_ = conn.close()