--- title: "#tls articles | Hashnode" description: "Explore 244 articles tagged #tls on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/tls" --- Tag # #tls 244 posts · 6 followers [Abdus Salam](https://hashnode.com/@aheadkit) · [4d ago](https://hashnode.com/posts/the-node-js-tls-bug-that-broke-certificate-checks-and-how-to-tell-if-you-re-affected/6aeec300f9a96183b6c5e12b) ### [The Node.js TLS Bug That Broke Certificate Checks — and How to Tell If You're Affected](https://aheadkit.hashnode.dev/the-node-js-tls-bug-that-broke-certificate-checks-and-how-to-tell-if-you-re-affected?utm_source=hashnode&utm_medium=feed) A critical TLS certificate-validation vulnerability was disclosed in Node.js 24.x and 26.x, tracked as CVE-2026-105483. It is the kind of bug that sounds abstract until you translate it: under certain 5 min read · [aheadkit.hashnode.dev](https://aheadkit.hashnode.dev/the-node-js-tls-bug-that-broke-certificate-checks-and-how-to-tell-if-you-re-affected?utm_source=hashnode&utm_medium=feed) [6](https://hashnode.com/posts/the-node-js-tls-bug-that-broke-certificate-checks-and-how-to-tell-if-you-re-affected/6aeec300f9a96183b6c5e12b) [Victor Okoroafor](https://hashnode.com/@okoroaforvic) · [5d ago](https://hashnode.com/posts/encrypted-is-not-authenticated-what-postgresql-sslmode-really-checks/6aedb45ea8148396614c8c28) ### [Encrypted Is Not Authenticated: What PostgreSQL sslmode Really Checks](https://victorokoroafor.hashnode.dev/encrypted-is-not-authenticated-what-postgresql-sslmode-really-checks?utm_source=hashnode&utm_medium=feed) Why transport encryption alone won’t protect you from a rogue server, and the one sslmode that does, tested in a reproducible Docker lab. 17 min read · [victorokoroafor.hashnode.dev](https://victorokoroafor.hashnode.dev/encrypted-is-not-authenticated-what-postgresql-sslmode-really-checks?utm_source=hashnode&utm_medium=feed) [Jaden Vo](https://hashnode.com/@jadenvo259) · [5d ago](https://hashnode.com/posts/check-tls-certificate-expiry-in-ci-with-python-ssl-socket-and-fail-the-build-within-n-days/6aed2a431656c5a7982a5824) ### [Check TLS Certificate Expiry in CI with Python (ssl + socket) and Fail the Build Within N Days](https://jadenvo259.hashnode.dev/check-tls-certificate-expiry-in-ci-with-python-ssl-socket-and-fail-the-build-within-n-days?utm_source=hashnode&utm_medium=feed) A tested stdlib checker that reads notAfter from any host, warns when a cert expires soon, and returns exit code 1 so GitHub Actions or a cron job can catch it before users do 8 min read · [jadenvo259.hashnode.dev](https://jadenvo259.hashnode.dev/check-tls-certificate-expiry-in-ci-with-python-ssl-socket-and-fail-the-build-within-n-days?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/check-tls-certificate-expiry-in-ci-with-python-ssl-socket-and-fail-the-build-within-n-days/6aed2a431656c5a7982a5824) [upordown.online](https://hashnode.com/@upordownonline) · [Oct 31](https://hashnode.com/posts/how-to-check-when-an-ssl-certificate-expires-and-catch-it-early/6ae6710fc454c177b8f3446c) ### [How to check when an SSL certificate expires (and catch it early)](https://upordownonline.hashnode.dev/how-to-check-when-an-ssl-certificate-expires-and-catch-it-early?utm_source=hashnode&utm_medium=feed) An expired certificate takes a site down as completely as a crashed server: browsers show a full-page warning and most visitors leave. The fix takes minutes, but only if you notice before the date pas 4 min read · [upordownonline.hashnode.dev](https://upordownonline.hashnode.dev/how-to-check-when-an-ssl-certificate-expires-and-catch-it-early?utm_source=hashnode&utm_medium=feed) [Yilia Lin](https://hashnode.com/@Yilia) · [Oct 29](https://hashnode.com/posts/tls-key-exchange-for-api-gateway-origins-cut-handshake-retries-safely/6ae330fecf551f6decd901fb) ### [TLS Key Exchange for API Gateway Origins: Cut Handshake Retries Safely](https://api7.hashnode.dev/tls-key-exchange-for-api-gateway-origins-cut-handshake-retries-safely?utm_source=hashnode&utm_medium=feed) By Yilia Lin. Originally published on API7.ai. Disclosure: This syndicated edition was prepared with AI assistance. TLS latency is not only a client-to-edge concern. An API gateway also acts as a TLS 8 min read · [api7.hashnode.dev](https://api7.hashnode.dev/tls-key-exchange-for-api-gateway-origins-cut-handshake-retries-safely?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tls-key-exchange-for-api-gateway-origins-cut-handshake-retries-safely/6ae330fecf551f6decd901fb) [ZyVOP](https://hashnode.com/@zyvop) · [Oct 27](https://hashnode.com/posts/ssl-tls-and-https-explained-what-the-padlock-actually-means-ix26r/6ae0456fc10104f384205606) ### [SSL, TLS, and HTTPS Explained: What the Padlock Actually Means](https://blog.zyvop.com/ssl-tls-and-https-explained-what-the-padlock-actually-means-ix26r?utm_source=hashnode&utm_medium=feed) A plain-English guide to SSL, TLS, and HTTPS: how they differ, how a secure connection is built, and what the padlock does and doesn’t tell you. 11 min read · [blog.zyvop.com](https://blog.zyvop.com/ssl-tls-and-https-explained-what-the-padlock-actually-means-ix26r?utm_source=hashnode&utm_medium=feed) [Dionisio Cortés Fernández](https://hashnode.com/@dionisioc) · [Oct 25](https://hashnode.com/posts/emudhra-weak-ca-keys/6ade84c2c4b468c7e1c65fbd) ### [Eight CA Keys Between 1 and 255: What the eMudhra Incident Means for Your Code](https://blog.dionisioc.dev/emudhra-weak-ca-keys?utm_source=hashnode&utm_medium=feed) Eight eMudhra CA keys were integers below 256. Why your backend's TLS clients may still trust them, and how to fix Java, Go, Node.js and Python. 30 min read · [blog.dionisioc.dev](https://blog.dionisioc.dev/emudhra-weak-ca-keys?utm_source=hashnode&utm_medium=feed) [Janith Jayasinghe](https://hashnode.com/@janithj) · [Oct 25](https://hashnode.com/posts/configure-ssl-https-oracle-weblogic-12-2-1-4/6ade0b83ba9692b180a8fde0) ### [How to Configure SSL/HTTPS in Oracle WebLogic Server 12.2.1.4](https://oracletechinsights.hashnode.dev/configure-ssl-https-oracle-weblogic-12-2-1-4?utm_source=hashnode&utm_medium=feed) Step-by-step guide to enabling HTTPS in WebLogic 12.2.1.4 using Java keystores, CA-signed certificates, CSR generation, and SSL configuration. 15 min read · [oracletechinsights.hashnode.dev](https://oracletechinsights.hashnode.dev/configure-ssl-https-oracle-weblogic-12-2-1-4?utm_source=hashnode&utm_medium=feed) [RONI DAS](https://hashnode.com/@ronidas) · [Oct 22](https://hashnode.com/posts/a-certificate-authoritys-private-key-was-the-number-4-we-checked/6ad99124928b553b54a66a6f) ### [A certificate authority's private key was the number 4. We checked.](https://systemdesignacademy.hashnode.dev/a-certificate-authoritys-private-key-was-the-number-4-we-checked?utm_source=hashnode&utm_medium=feed) Eight eMudhra intermediate CA keys were generated wrongly. We recovered six of them from the public certificates in under a quarter of a second each. Browsers are protected; a lot of other software is not, and the reason is how certificate trust actu 7 min read · [systemdesignacademy.hashnode.dev](https://systemdesignacademy.hashnode.dev/a-certificate-authoritys-private-key-was-the-number-4-we-checked?utm_source=hashnode&utm_medium=feed) [BookMyHost](https://hashnode.com/@bookmyhost) · [Oct 14](https://hashnode.com/posts/works-on-desktop-fails-on-phones-the-post-quantum-tls-bug-hiding-in-your-network-card/6acff2f597d7837fafc94d7b) ### [Works on desktop, fails on phones: the post-quantum TLS bug hiding in your network card](https://bookmyhost.hashnode.dev/works-on-desktop-fails-on-phones-the-post-quantum-tls-bug-hiding-in-your-network-card?utm_source=hashnode&utm_medium=feed) Modern browsers now send a larger TLS hello. On some Windows servers, a receive-offload bug in the network card silently breaks about half of those connections. Here is how to spot it, why it happens, 4 min read · [bookmyhost.hashnode.dev](https://bookmyhost.hashnode.dev/works-on-desktop-fails-on-phones-the-post-quantum-tls-bug-hiding-in-your-network-card?utm_source=hashnode&utm_medium=feed)