From db883ae66a1c0fc6664fcae56508f3e147806700 Mon Sep 17 00:00:00 2001
From: Darren Shepherd <darren@rancher.com>
Date: Wed, 16 Jun 2021 00:23:14 -0700
Subject: [PATCH] Don't reset connections on the first load of the certs

---
 listener.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/listener.go b/listener.go
index 4328935..a67a932 100644
--- a/listener.go
+++ b/listener.go
@@ -369,8 +369,8 @@ func (l *listener) loadCert() (*tls.Certificate, error) {
 		return nil, err
 	}
 
-	// cert has changed, close closeWrapper wrapped connections
-	if l.conns != nil {
+	// cert has changed, close closeWrapper wrapped connections if this isn't the first load
+	if l.conns != nil && l.cert == nil {
 		l.connLock.Lock()
 		for _, conn := range l.conns {
 			_ = conn.close()