QuickNote: Keep the certs updated and metric them!
QuickNote: Keep the certs updated and metric them! Content QuickNote: Keep the certs updated and metric them! QuickNote: Keep the certs updated and metric them! It is good practice to keep the certificates updated and having metrics/management to track the expiration/rotation dates. We basically have two types of certificates, our own service certs and the down-streamer certificates. It involves both keystore and truststore on both client and server side. I have seen issues caused by the expiration/rotaion of the existing certificates. For our part, it may cause the unavailability of our services to our customers. Usually we should have some internal service/microservice/mangement to help mange the certificates and poke the metrics. For the down streamer part, it may cause the unavailability of down streamers’ service, which also will lead our service down if it is in the critical path. In this case, it is always better to keep the expiration/rotation info...