An internal LDAP certificate renewal failed due to incorrect SELinux contexts on transferred certificate files. Despite correct permissions and ownership, OpenLDAP couldn't initialise TLS. Using restorecon to fix the security context resolved the issue immediately, highlighting the importance of SELinux context verification in certificate deployments.

How we migrated our production care management platform from ANS to Cloudflare Load Balancer — eliminating manual SSL certificate management that had caused a past outage, replacing an EOL HAProxy instance, and achieving zero downtime through a dummy hostname pre-configuration strategy and a planned 45-minute DNS cutover window.