<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>TLS on SystemsGolive</title><link>https://systemsgolive.com/tags/tls/</link><description>Recent content in TLS on SystemsGolive</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 systemsgolive.com and Mickael Asghar. All rights reserved.</copyright><lastBuildDate>Sat, 03 Jan 2026 23:32:31 +0000</lastBuildDate><atom:link href="https://systemsgolive.com/tags/tls/index.xml" rel="self" type="application/rss+xml"/><item><title>Case Study - Automating Let's Encrypt Wildcard Certificates with Cloudflare DNS and Full (Strict) TLS Encryption</title><link>https://systemsgolive.com/post/letsencrypt-wildcard-cloudflare-full-strict/</link><pubDate>Sat, 03 Jan 2026 23:32:31 +0000</pubDate><guid>https://systemsgolive.com/post/letsencrypt-wildcard-cloudflare-full-strict/</guid><description>
This article demonstrates how to implement Full (Strict) SSL/TLS encryption by combining Cloudflare's managed frontend certificates with Let's Encrypt wildcard certificates on your origin server.</description></item><item><title>Migrating from ANS to Cloudflare Load Balancer: Zero-Downtime DNS Cutover with Pre-Configuration Strategy</title><link>https://systemsgolive.com/post/ans-to-cloudflare-lb-migration-zero-downtime/</link><pubDate>Sun, 23 Nov 2025 11:44:31 +0100</pubDate><guid>https://systemsgolive.com/post/ans-to-cloudflare-lb-migration-zero-downtime/</guid><description>
How we migrated our production care management platform from ANS to Cloudflare Load Balancer — eliminating manual SSL certificate management that had caused a past outage, replacing an EOL HAProxy instance, and achieving zero downtime through a dummy hostname pre-configuration strategy and a planned 45-minute DNS cutover window.</description></item><item><title>TLS 1.3 with Ed25519 and a Private CA: End-to-End Encrypted Client-Server Communication</title><link>https://systemsgolive.com/post/tls-ed25519-private-ca-nginx-setup/</link><pubDate>Thu, 10 Jul 2025 11:37:03 +0100</pubDate><guid>https://systemsgolive.com/post/tls-ed25519-private-ca-nginx-setup/</guid><description>
This guide demonstrates how to set up secure TLS 1.3 communication using Ed25519 elliptic curve certificates and a private Certificate Authority (CA). It covers encrypted client-server communication with modern, efficient cryptographic standards — ideal for internal systems, microservices, and zero-trust network architectures.</description></item></channel></rss>