https://rnemeth90.github.io/tags/tls/Recent content in Tls on GeekyRyanHugoen-usThu, 29 Aug 2024 09:00:00 +0000https://rnemeth90.github.io/projects/2024-08-29-yearly-tls-certificate-renewal/Thu, 29 Aug 2024 09:00:00 +0000https://rnemeth90.github.io/projects/2024-08-29-yearly-tls-certificate-renewal/<p>Every year: renew the TLS certificates before they expire. It&rsquo;s not glamorous, but it&rsquo;s one of the more embarrassing ways to take down a customer-facing service if you slip up on it.</p> <p>This round meant hitting certificates in multiple places - NGINX endpoints, IIS services, and some Terraform configs where certs are hard-coded and need manual updates instead of just dropping in a new one. Each has its own deployment quirks, so the real discipline is keeping an accurate inventory of everywhere a cert lives, not just the obvious spots.</p>